* l’application s’exécute localement (par ex. sur `localhost`) ou sur un réseau interne
* et l’application n’a aucun mécanisme d’authentification, elle part du principe que toute requête provenant du même réseau est fiable.

## Exemple d’attaque { #example-attack }

Imaginez que vous mettiez au point un moyen d’exécuter un agent IA local.

Il expose une API à l’adresse

```
http://localhost:8000/v1/agents/multivac
```

    @Size(max = 1000)
    public String spnegoPreauthPassword;

    /** Enable or disable SPNEGO basic authentication. */
    @Size(max = 10)
    public String spnegoAllowBasic;

    /** Enable or disable SPNEGO unsecure basic authentication. */
    @Size(max = 10)
    public String spnegoAllowUnsecureBasic;

    /** Enable or disable SPNEGO NTLM prompt. */
    @Size(max = 10)
    public String spnegoPromptNtlm;

#     cuda:         Build with CUDA support.
#     cuda_clang    Build with CUDA Clang support.
#     rocm:         Build with AMD GPU support (rocm)
#     mkl:          Enable full mkl support.
#     nogcp:        Disable GCS support.
#     nonccl:       Disable nccl support.
#
#
# Remote build execution options (only configured to work with TF team projects for now.)

          publish_results: true

      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
      # format to the repository Actions tab.
      - name: "Upload artifact"
        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
        with:
          name: SARIF file
          path: results.sarif
          retention-days: 5

        logNotificationTarget.expired();
        logNotificationTarget.expired();
        // No exception means success
    }

    @Test
    public void test_expired_disabled_doesNotDrainBuffer() {
        // Disable log notification
        ComponentUtil.getFessConfig().setLogNotificationEnabled(false);

        // Add events to buffer
        ComponentUtil.getLogNotificationHelper()

///

### Activer les en-têtes transférés par le proxy { #enable-proxy-forwarded-headers }

Vous pouvez démarrer FastAPI CLI avec l'option de CLI `--forwarded-allow-ips` et fournir les adresses IP à considérer comme fiables pour lire ces en‑têtes transférés.

Si vous la définissez à `--forwarded-allow-ips="*"`, elle fera confiance à toutes les IP entrantes.

Go 1.24 added new values for the `multipathtcp` setting.
The possible values for `multipathtcp` are now:
- "0": disable MPTCP on dialers and listeners by default
- "1": enable MPTCP on dialers and listeners by default
- "2": enable MPTCP on listeners only by default
- "3": enable MPTCP on dialers only by default

For Go 1.24, it now defaults to multipathtcp="2", thus

crawler.document.html.default.exclude.search.patterns=

# file

# Encoding for file names in documents.
crawler.document.file.name.encoding=
# Label to use when a file has no title.
crawler.document.file.no.title.label=No title.
# Whether to ignore files with empty content.
crawler.document.file.ignore.empty.content=false
# Maximum length of file title in documents.
crawler.document.file.max.title.length=100

   * graphBuilder.incidentEdgeOrder(ElementOrder.stable())}.
   *
   * <h3>In combination with {@code incidentEdgeOrder}</h3>
   *
   * <p>{@code incidentEdgeOrder(ElementOrder.stable())} guarantees the ordering of the returned
   * collections of the following methods:
   *
   * <ul>
   *   <li>For {@link Graph} and {@link ValueGraph}:
   *       <ul>
   *         <li>{@code edges()}: Stable order

    objects.property<Boolean>()
).apply {
    disabledChecks.addAll(
        // ENABLE
        "PatternMatchingInstanceof", // We should enable this.
        "StatementSwitchToExpressionSwitch", // We should enable this.
        "StringConcatToTextBlock", // We should enable this.
        "ClassCanBeStatic", // We should enable this.

        // DISCUSS