Ermittelt vor einer Messintegration, welche fest definierten Timing-Anfragekonte...

{ "body": { "url": "https://example.com/" }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 100, "evidence": [], "limits": [ "Isolated Fetch TAO check over eight fixed synthetic request contexts, each with credentials omitted/included and a prior timing-failure flag absent/present. Cases include same-origin basic/navigation, same-host alternate-port no-CORS/CORS, opposite-scheme navigation, foreign navigation/CORS and opaque-origin no-CORS. Sticky prior failure precedes wildcard and origin grants; cross-origin navigation denial precedes the basic-taint fallback. Quoted commas are preserved while splitting header fields. No actual performance timings, redirect history, browser requester, response taint or availability is inferred. Equal admission with/without credentials is a TAO fact, not a CORS grant. Full native/RAM header-key retention is required; consumed sentinels are unknown. Output only counts, no origin, header or contact value." ], "module": "http-timing-allow-origin-sticky-context-disclosure", "state": "not_observed", "value": { "basic_taint_fallback_successes": 4, "credentialed_successes": 2, "cross_origin_header_grants": 0, "cross_origin_navigation_denials": 4, "explicit_origin_successes": 0, "fresh_context_cases": 16, "fresh_tao_failures": 12, "fresh_tao_successes": 4, "header_fields": 0, "nonbasic_taint_denials": 8, "responses": 1, "sticky_context_cases": 16, "sticky_tao_failures": 16, "uncredentialed_successes": 2, "wildcard_successes": 0 }, "warnings": [] } ], "known_count": 1, "scope": { "at": "2026-10-28T17:24:56.452Z", "contact_values_returned": false, "pages": 1, "rendered": false, "requests": 6 }, "warnings": [] }, "type": "json" }