Test Id
Test 956
Test Trace Id
c6e8fc73-e123-4b89-bbfd-e0c30d550ff3
Timestamp
Tue, 23 Jun 2026 21:26:04 GMT
Scenario
Send a happy flow request with a [dummy] Transfer-Encoding header, value [cats]
Expected Result
Should return 400|501
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
DummyTransferEncodingHeaders
Full Request Path
Http Method
{
"notifications": {
"key": true
}
}
[
{
"key": "Transfer-Encoding",
"value": "cats"
},
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 956 - DummyTransferEncodingHeaders)"
},
{
"key": "X-Cats-Trace-Id",
"value": "c6e8fc73-e123-4b89-bbfd-e0c30d550ff3"
}
]
curl -X PUT \
-H "Transfer-Encoding: cats" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 956 - DummyTransferEncodingHeaders)" \
-H "X-Cats-Trace-Id: c6e8fc73-e123-4b89-bbfd-e0c30d550ff3" \
\
-d '{"notifications":{"key":true}}' \
https://qa-api.puk3p.online/api/account/notifications
{
"responseCode": 403,
"httpMethod": "PUT",
"responseTimeInMs": "131",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "109",
"jsonBody": {
"timestamp": "2026-06-23T21:26:04.334Z",
"status": 403,
"error": "Forbidden",
"path": "/api/account/notifications"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:26:04 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test956