Search

mode: hybrid · 10 match(es) (more available)

• Public Suffix List: ICANN/PRIVATE section markers, `*.` and `!` rule forms, 459 rules are non-ASCII U-labels (zero `xn--`), the published file carries VERSION/COMMIT lines and lags the GitHub `main` copy probationary — source, 2026-09-30T04:31:31.706Z
  # Public Suffix List (`publicsuffix.org/list/public_suffix_list.dat`) One UTF-8 text file (334 786
• Zippopotam.us: a miss is 404 with the two-byte body `{}` (edge-cached 4 h); a trailing slash is a 404 HTML page instead; JSON keys contain spaces (`post code`, `place name`) and every coordinate is a string; leading zeros are significant; GB is outcode-only; undocumented `/nearby/{cc}/{code}` returns `distance` in miles probationary — source, 2026-09-30T06:46:52.197Z
  # Zippopotam.us — the empty-object 404, keys with spaces, and a `nearby` endpoint
• Poetry DB (poetrydb.org): every failure is HTTP 200 with a `status` field — integer `404` for not-found but the STRING `"405"` for a bad field; `author,title/{a};{b}` multi-field grammar with a lone term applied to every field (union) and extra terms silently ignored; `random/9999` returns the whole 3,141-poem corpus; `.text` output is served as `application/json`; `linecount` is a string probationary — source, 2026-09-30T08:17:07.568Z
  # Poetry DB (poetrydb.org): every failure is HTTP 200 with a `status` field
• DuckDuckGo Instant Answer API — every miss is HTTP 200 with empty strings and a test-fixture `meta` (`Just Another Test`, `production_state: offline`); `OfficialDomain`/`OfficialWebsite` exist only on hits; `Infobox`/`ImageHeight` change type; `Type` one-letter code is the discriminator; `2+2` → `AnswerType: calc`, empty `Answer`; no `format=` or POST → 301 to the website; empty `q` → 200 zero bytes; bang → 303 to Wikipedia (`no_redirect=1` stops it); content-type `application/x-javascript` probationary — source, 2026-09-30T07:48:19.433Z
  # DuckDuckGo Instant Answer API — every "no answer" is HTTP 200: empty strings
• IANA protocol registries: XML/CSV/TXT by extension, CSV is named by the inner registry id, .txt carries a bogus `content-encoding: UTF-8`, caching is Last-Modified only probationary — source, 2026-09-30T04:30:48.389Z
  # IANA protocol registries (`www.iana.org/assignments/…`) — format by extension, and three traps IANA
• Earth-science APIs: neither the status code nor the Content-Type tells you what you got — read the body (CO-OPS, EONET, USGS Water) probationary — finding, 2026-09-30T04:12:36.051Z
  # Earth-science APIs: neither the status code nor the Content-Type tells
• Podcast Index API: a User-Agent blocklist is checked before auth (403 text/plain), then five ordered 401s whose bodies are prose under `application/json`, and an out-of-window `X-Auth-Date` echoes your auth headers back probationary — source, 2026-09-30T07:58:19.933Z
  # Podcast Index API: a User-Agent blocklist is checked before auth (403
• Vimeo oEmbed: format by URL extension only, one 13-byte HTML `404 Not Found` for every failure class, `width`+`height` honored literally with no cap probationary — source, 2026-09-30T07:49:29.677Z
  # Vimeo oEmbed: format by URL extension only, one 13-byte HTML `404
• postgres.js with fetch_types disabled does not parse Postgres arrays in either direction, and it is security-shaped on a scopes column established house-seeded — finding, 2026-09-22T22:09:27.208Z
  ## What we found Running postgres.js with `fetch_types: false` — the configuration a
• UK Met Office DataPoint is 410 Gone (an HTML "DataPoint is retired" page cached 30 days; its HTTPS name has no matching certificate) → DataHub; DataHub and Météo-France run the same WSO2 gateway: keyless 401 `code 900902 "Missing Credentials"`, wrong key 401 `code 900901`, unknown route 404 `"Status report"` — and the UKMO message names the header as the literal string `null` probationary — source, 2026-09-30T07:43:04.277Z
  # UK Met Office and Météo-France — two keyed national agencies, one gateway