{
  "schemaVersion": 1,
  "caseId": "ammonia-ghsa-x43w-36pp-96g3",
  "testedAt": "2026-10-18",
  "scope": {
    "kind": "isolated-library-policy-tests",
    "testCount": 5,
    "inputCount": 7,
    "officialFixedCrate": true,
    "originalLogsPublic": false,
    "productScannerUsed": false
  },
  "arms": {
    "vulnerable": {
      "version": "4.2.3",
      "exitCode": 101,
      "passed": 3,
      "failed": 2,
      "filtered": 108,
      "testExcerpt": [
        "test test::policy_css_url_http_lower_denied ... ok",
        "test test::policy_css_url_http_upper_denied ... FAILED",
        "test test::policy_css_url_https_control ... ok",
        "test test::policy_css_url_relative_lower_denied ... ok",
        "test test::policy_css_url_relative_mixed_denied ... FAILED",
        "test result: FAILED. 3 passed; 2 failed; 0 ignored; 0 measured; 108 filtered out; finished in 0.00s"
      ]
    },
    "fixed": {
      "version": "4.2.4",
      "exitCode": 0,
      "passed": 5,
      "failed": 0,
      "filtered": 109,
      "testExcerpt": [
        "test test::policy_css_url_http_lower_denied ... ok",
        "test test::policy_css_url_http_upper_denied ... ok",
        "test test::policy_css_url_https_control ... ok",
        "test test::policy_css_url_relative_lower_denied ... ok",
        "test test::policy_css_url_relative_mixed_denied ... ok",
        "test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 109 filtered out; finished in 0.00s"
      ]
    }
  },
  "checks": [
    {
      "id": "http_lower",
      "testName": "policy_css_url_http_lower_denied",
      "role": "denied-policy",
      "vulnerable": "ok",
      "fixed": "ok"
    },
    {
      "id": "http_upper",
      "testName": "policy_css_url_http_upper_denied",
      "role": "denied-policy",
      "vulnerable": "failed",
      "fixed": "ok"
    },
    {
      "id": "https_control",
      "testName": "policy_css_url_https_control",
      "role": "allowed-control",
      "vulnerable": "ok",
      "fixed": "ok"
    },
    {
      "id": "relative_lower",
      "testName": "policy_css_url_relative_lower_denied",
      "role": "denied-policy",
      "vulnerable": "ok",
      "fixed": "ok"
    },
    {
      "id": "relative_mixed",
      "testName": "policy_css_url_relative_mixed_denied",
      "role": "denied-policy",
      "vulnerable": "failed",
      "fixed": "ok"
    }
  ],
  "limitations": {
    "zh": "這是人工整理的離線函式庫政策測試摘要。第二輪 4.2.3 比較的外層控制器因額外指紋檢查回報失敗；保存的原始測試輸出及來源綁定，後經修正的唯讀驗證器核對，並未重跑目標。僅公開兩版各六行測試輸出節錄，完整原始 log 未公開；未測瀏覽器載入、產品掃描、應用整合、4.1.8 或所有受影響版本，也不證明 Vettalon 自動發現此漏洞。",
    "en": "This is a curated summary of isolated offline library policy tests. The outer controller for the second 4.2.3 comparison failed an additional fingerprint check; a corrected read-only validator checked the saved raw test output and source bindings without rerunning the target. Only six-line test-output excerpts for each version are public; complete original logs are not published. Browser loading, product scans, app integration, 4.1.8, and all affected versions were not tested. This does not show automated discovery by Vettalon."
  }
}