content - Code Search

docs/zh/docs/advanced/strict-content-type.md

# 严格的 Content-Type 检查 { #strict-content-type-checking }

默认情况下，FastAPI 对 JSON 请求体使用严格的 `Content-Type` 头检查。这意味着，JSON 请求必须包含有效的 `Content-Type` 头（例如 `application/json`），其请求体才会被按 JSON 解析。

## CSRF 风险 { #csrf-risk }

此默认行为在一个非常特定的场景下，可防御一类跨站请求伪造（CSRF）攻击。

这类攻击利用了浏览器的一个事实：当请求满足以下条件时，浏览器允许脚本在不进行任何 CORS 预检的情况下直接发送请求：

- 没有 `Content-Type` 头（例如使用 `fetch()` 携带 `Blob` 作为 body）
- 且不发送任何认证凭据。

这种攻击主要在以下情况下相关：

- 应用在本地（如 `localhost`）或内网中运行

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Fri Mar 20 14:29:48 GMT 2026

- 3K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/ru/docs/advanced/strict-content-type.md

# Строгая проверка HTTP-заголовка Content-Type { #strict-content-type-checking }

По умолчанию **FastAPI** использует строгую проверку HTTP-заголовка `Content-Type` для JSON-тел запросов. Это означает, что JSON-запросы должны включать корректный заголовок `Content-Type` (например, `application/json`), чтобы тело запроса было обработано как JSON.

## Риск CSRF { #csrf-risk }

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 19 17:56:20 GMT 2026

- 5.6K bytes

- Click Count (0)

github.com/tiangolo/fastapi

docs/es/docs/advanced/strict-content-type.md

# Chequeo estricto de Content-Type { #strict-content-type-checking }

Por defecto, **FastAPI** usa un chequeo estricto del header `Content-Type` para request bodies JSON, esto significa que las requests JSON deben incluir un header `Content-Type` válido (p. ej. `application/json`) para que el request body se parse como JSON.

## Riesgo de CSRF { #csrf-risk }

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Thu Mar 19 18:12:26 GMT 2026

- 3.4K bytes

- Click Count (0)

github.com/tiangolo/fastapi

tests/test_application.py

    assert response.status_code == 200, response.text
    assert response.headers["content-type"] == "text/html; charset=utf-8"
    assert "window.opener.swaggerUIRedirectOauth2" in response.text


def test_redoc():
    response = client.get("/redoc")
    assert response.status_code == 200, response.text
    assert response.headers["content-type"] == "text/html; charset=utf-8"
    assert "redoc@2" in response.text

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Sun Feb 08 10:18:38 GMT 2026

- 56.9K bytes

- Click Count (0)

github.com/tiangolo/fastapi

tests/test_include_router_defaults_overrides.py

                                "content": {"application/x-level-0": {"schema": {}}},
                            },
                            "400": {"description": "Client error level 0"},
                            "422": {
                                "description": "Validation Error",
                                "content": {
                                    "application/json": {

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Sun Feb 08 10:18:38 GMT 2026

- 385.6K bytes

- Click Count (0)

github.com/tiangolo/fastapi

tests/test_openapi_separate_input_output_schemas.py

                                "description": "Successful Response",
                                "content": {"application/json": {"schema": {}}},
                            },
                            "422": {
                                "description": "Validation Error",
                                "content": {
                                    "application/json": {
                                        "schema": {

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Tue Feb 17 09:59:14 GMT 2026

- 27.8K bytes

- Click Count (0)

github.com/codelibs/curl4j

src/test/java/org/codelibs/curl/CurlResponseTest.java

        Map<String, List<String>> headers = new HashMap<>();
        headers.put("Content-Type", Arrays.asList("application/json"));
        headers.put("Content-Length", Arrays.asList("100"));
        response.setHeaders(headers);

        String contentType = response.getHeaderValue("Content-Type");
        String contentLength = response.getHeaderValue("content-length"); // Test case insensitive

Created: Thu Apr 02 15:34:12 GMT 2026

- Last Modified: Sat Mar 21 09:11:12 GMT 2026

- 17.7K bytes

- Click Count (0)

github.com/tiangolo/fastapi

tests/test_schema_extra_examples.py

                                "description": "Successful Response",
                                "content": {"application/json": {"schema": {}}},
                            },
                            "422": {
                                "description": "Validation Error",
                                "content": {
                                    "application/json": {
                                        "schema": {

Created: Sun Apr 05 07:19:11 GMT 2026

- Last Modified: Tue Feb 17 09:59:14 GMT 2026

- 34.7K bytes

- Click Count (0)

github.com/codelibs/fess

src/test/java/org/codelibs/fess/job/IndexExportJobTest.java

        assertTrue(content.contains("<html lang=\"ja\">"));
    }

    @Test
    public void test_exportDocument_createsDirectories() {
        final Map<String, Object> source = new LinkedHashMap<>();
        source.put("url", "https://example.com/a/b/c/deep.html");
        source.put("title", "Deep");
        source.put("content", "Content");

Created: Tue Mar 31 13:07:34 GMT 2026

- Last Modified: Sun Mar 15 09:08:38 GMT 2026

- 66.1K bytes

- Click Count (0)

github.com/codelibs/fess

src/main/java/org/codelibs/fess/llm/LlmChatRequest.java

     *
     * @param content the message content
     * @return this request for method chaining
     */
    public LlmChatRequest addSystemMessage(final String content) {
        messages.add(LlmMessage.system(content));
        return this;
    }

    /**
     * Adds a user message to the request.
     *
     * @param content the message content
     * @return this request for method chaining

Created: Tue Mar 31 13:07:34 GMT 2026

- Last Modified: Thu Mar 05 03:38:31 GMT 2026

- 6.4K bytes

- Click Count (0)

Search Options