Merge pull request #25 from safe1ine/tcs

Some samples containing false positive keywords

testcases/00/02/95284b1305474e3a365ca48db426.white

@@ -0,0 +1,21 @@
+POST /cgi/capi?cmd=DescribeSiteMsgSummary&action=delegate&serviceType=message&secure=1&version=3&dictId=2363&sts=1&t=1688384173529&uin=100003290640&ownerUin=100003290640&csrfCode=2093508630&msg=1%20and%201=1%20is%20a%20very%20basic%20mathematical%20operation HTTP/1.1
+Host: console.cloud.tencent.com
+Content-Length: 101
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+X-Life: 1048
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Content-Type: application/json
+Accept: application/json, text/javascript, */*; q=0.01
+X-Requested-With: XMLHttpRequest
+X-Lid: Sk-3z4xFh
+Sec-Ch-Ua-Platform: "Windows"
+Origin: https://console.cloud.tencent.com
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://console.cloud.tencent.com/message/detail/547411489
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+
+{"regionId":1,"serviceType":"message","cmd":"DescribeSiteMsgSummary","data":{"Version":"2018-12-25"}}

testcases/00/06/005a52981dd324c40488a1a588f9.white

@@ -0,0 +1,22 @@
+POST /speed?id=9GkL9SLGjnYrr8bJd6&uin=&version=1.35.26&content=For%20people%20who%20write%20code,%20the%20ability%20of%20compiled%20languages%20%E2%80%8B%E2%80%8B<script%20%20ability,%20but%20it%20>%20the%20capabilities%20of%20regular%20expressions&aid=9f77cd42-08ce-4d1b-9d16-42d90e1f7792&env=production&platform=3&netType=4&vp=0%20*%200&sr=1920%20*%201080&sessionId=session-1688375712738&from=https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html&referer=https%3A%2F%2Fmodao.cc%2F HTTP/1.1
+Host: rumt-zh.com
+Content-Length: 678
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJl8O6PWudNUIcH6F
+Accept: */*
+Origin: https://webpage.qidian.qq.com
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://webpage.qidian.qq.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+
+------WebKitFormBoundaryJl8O6PWudNUIcH6F
+Content-Disposition: form-data; name="payload"
+
+{"duration":{"fetch":[],"static":[{"url":"https://bqq.gtimg.com/CDN/source/audio/ring.mp3","method":"get","duration":144.9,"status":200,"type":"static","isHttps":true,"urlQuery":"","domainLookup":0,"connectTime":0}]},"id":"9GkL9SLGjnYrr8bJd6","uin":"","version":"1.35.26","aid":"9f77cd42-08ce-4d1b-9d16-42d90e1f7792","env":"production","platform":3,"netType":4,"vp":"0 * 0","sr":"1920 * 1080","sessionId":"session-1688375712738","from":"https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html","referer":"https%3A%2F%2Fmodao.cc%2F"}
+------WebKitFormBoundaryJl8O6PWudNUIcH6F--

testcases/00/07/00071dbf87818e947d2690e9a9ed9c3b.white

@@ -0,0 +1,14 @@
+POST /i/14029/da/?type=multi&wid=695672&sid=CC44727D8E38AE81538BAA13BD4D0A2545&pvid=1688382620847&dnt=1&dc=The%20union%20leaders%20select%20their%20representatives%20from%20among%20the%20members.&dv=1&dl=337&retryCode=socketNotConnected HTTP/1.1
+Host: collection.decibelinsight.net
+Content-Length: 337
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Content-Type: text/plain;charset=UTF-8
+Accept: */*
+Origin: https://www.ibm.com
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+
+[{"type":"proxyUrls","data":{"prefix":"https://proxy.decibelinsight.net/v2-us-east-1/695672/2023-07-03/www.ibm.com/","items":["https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=%3CRANDOMNUMBER","https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=9167618174"]},"offset":0}]

testcases/00/74/00741c5954a957427dc6da810e141d68.white

@@ -0,0 +1,14 @@
+GET /new/helloService.ashx?vg=We%20need%20to%20select%20a%20few%20items%20from%20this%20list%20for%20family%20next%20meeting.80&_=1688375748903 HTTP/1.1
+Host: passport.jd.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: same-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://search.jd.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/00/91/00914c32c3c93681ab05d607a6beaccf.white

@@ -0,0 +1,20 @@
+GET /fd/ls/l?IG=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively.&Type=Event.ClientInst&DATA=[{%22T%22:%22Info%22,%22FID%22:%22CI%22,%22Name%22:%22HasRR%22,%22Text%22:%221%22}] HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Platform: "Windows"
+Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: image
+Referer: https://cn.bing.com/search?q=site:segmentfault.com%20/static/css/static/fonts/abc.woff
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/21/2d210b84c723363f537696bc7e93ab39.white

@@ -0,0 +1,16 @@
+GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
+Host: game.qzone.qq.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
+X-Requested-With: XMLHttpRequest
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+Connection: close
+

testcases/2d/21/d81bef68377edb19334c4f4fa79fbcd1.white

@@ -0,0 +1,16 @@
+GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
+Host: game.qzone.qq.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
+X-Requested-With: XMLHttpRequest
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+Connection: close
+

testcases/2d/32/2d32929f28f5e026ebf88f00b10318ce.white

@@ -0,0 +1,17 @@
+GET /?msg=He%20made%20a%20plan:%20in%20the%20case%20when%20he%20wins%20the%20lottery,%20he%20will%20travel%20around%20the%20world.%20then,%20he%20can%20finally%20fulfill%20his%20dream. HTTP/1.1
+Host: mygame.5054399.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://my.4399.com/yxpkt/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+If-None-Match: "58574ffd-f"
+If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
+Connection: close
+

testcases/2d/32/8807aa6c94559c411aab53979adaf5a8.white

@@ -0,0 +1,17 @@
+GET /?msg=In%20the%20case%20when%20the%20battery%20runs%20out,%20the%20laptop%20will%20automatically%20shut%20down.%20then,%20you%27ll%20need%20to%20recharge%20it%20to%20use%20it%20again. HTTP/1.1
+Host: mygame.5054399.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://my.4399.com/yxpkt/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+If-None-Match: "58574ffd-f"
+If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
+Connection: close
+

testcases/2d/32/d81bef68377edb19334c4f4fa79fbcd2.white

@@ -0,0 +1,17 @@
+GET /The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
+Host: mygame.5054399.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://my.4399.com/yxpkt/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+If-None-Match: "58574ffd-f"
+If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
+Connection: close
+

testcases/2d/8a/2d8a7d8395c78a694ee564b3e0e42d3b.white

@@ -0,0 +1,12 @@
+GET /s?keyword=Can%20you%20help%20me%20select%20a%20suitable%20case%20for%20my%20new%20laptop? HTTP/1.1
+Host: npm.staticblitz.com
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: */*
+Origin: https://stackblitz.com
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://stackblitz.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/8a/7225d77be53bd040fbff677d3cb3aacf.white

@@ -0,0 +1,12 @@
+GET /s?keyword=The%20judge%20carefully%20select%20the%20most%20representative%20case%20to%20set%20a%20precedent. HTTP/1.1
+Host: npm.staticblitz.com
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: */*
+Origin: https://stackblitz.com
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://stackblitz.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/98/23ba955e1507a0fd239d9e56808c96c1.white

@@ -0,0 +1,21 @@
+GET /search?q=He%20select%20the%20strongest%20case%20to%20present%20to%20the%20jury.&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: iframe
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/98/2d986f3957463936312e54fef8e82ee5.white

@@ -0,0 +1,21 @@
+GET /search?q=The%20government%20has%20imposed%20a%20limit%20on%20the%20amount%20of%20water%20that%20can%20be%20drawn%20from%20the%20river.&sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: iframe
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/98/6217e139528033c75f2abf16df27d16d.white

@@ -0,0 +1,21 @@
+GET /search?q=We%20need%20to%20limit%20the%20number%20of%20people%20coming%20from%20other%20countries%20due%20to%20the%20current%20situation.&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: iframe
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/98/6f3957463936312e54fef8e82fe5.white

@@ -0,0 +1,22 @@
+GET /search?q=Can%20you%20help%20me%20set%20a%20limit%20on%20the%20data%20usage%20from%20my%20phone?%20I%20don%27t%20want%20to%20exceed%20my%20monthly%20plan.&qs=HS&pq=te+&sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: iframe
+Referer: https://cn.bing.com/search?q=modsecurity&filters=ufn%3a%22ModSecurity%22+sid%3a%22863a4021-961d-5d9b-9be1-4f1a555d3703%22&asbe=AS&qs=MB&pq=modsec&sc=10-6&cvid=AB071B8E32B4494FA036CB7051595CF0&FORM=QBLH&sp=1&lq=0
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/98/aa13861e16c9bbcabc91ba775e143e8e.white

@@ -0,0 +1,21 @@
+GET /search?q=I%27m%20trying%20to%20limit%20my%20sugar%20intake%20by%20avoiding%20sweets%20from%20the%20candy%20store.sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
+Host: cn.bing.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+Sec-Ch-Ua-Full-Version: "114.0.5735.199"
+Sec-Ch-Ua-Arch: "x86"
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Ch-Ua-Platform-Version: "15.0.0"
+Sec-Ch-Ua-Model: ""
+Sec-Ch-Ua-Bitness: "64"
+Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
+Upgrade-Insecure-Requests: 1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: navigate
+Sec-Fetch-User: ?1
+Sec-Fetch-Dest: iframe
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/b6/7aafd258b7bd49f1466c953535710994.white

@@ -0,0 +1,14 @@
+GET /?msg=In%20the%20case%20when%20the%20weather%20is%20sunny,%20we%20will%20go%20for%20a%20picnic.%20then,%20we%20can%20enjoy%20the%20outdoors. HTTP/1.1
+Host: fe-static.xhscdn.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://agree.xiaohongshu.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/2d/b6/93e8adb238e637940d874e467597.white

@@ -0,0 +1,14 @@
+GET /push/?data=The%20teacher%20explained%20the%20rule:%20in%20the%20case%20when%20a%20student%20is%20absent,%20they%20should%20inform%20the%20class%20beforehand.%20then,%20the%20class%20can%20proceed%20without%20them. HTTP/1.1
+Host: fe-static.xhscdn.com
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+Sec-Ch-Ua-Platform: "Windows"
+Accept: */*
+Sec-Fetch-Site: cross-site
+Sec-Fetch-Mode: no-cors
+Sec-Fetch-Dest: script
+Referer: https://agree.xiaohongshu.com/
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+

testcases/92/49/913922b6c313eb1bc7c594324578da3f.white

@@ -0,0 +1,20 @@
+GET /webapp/plugin/sangfor_databases/view/thread.html?p=The%20union%20select%20members%20from%20each%20department%20to%20form%20a%20committee. HTTP/1.1
+Host: bbs.sangfor.com.cn
+Cache-Control: no-cache
+Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
+Pragma: no-cache
+Sec-Ch-Ua-Mobile: ?0
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
+X-Tingyun-Id: _jEJpwY16AA;r=379620656
+Accept: application/json, text/plain, */*
+X-Requested-With: XMLHttpRequest
+If-Modified-Since: Mon, 26 Jul 1997 05:00:00 GMT
+Sec-Ch-Ua-Platform: "Windows"
+Sec-Fetch-Site: same-origin
+Sec-Fetch-Mode: cors
+Sec-Fetch-Dest: empty
+Referer: https://bbs.sangfor.com.cn/plugin.php?id=sangfor_databases:index
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
+Connection: close
+