This type of attack is mainly relevant when:

* the application is running locally (e.g. on `localhost`) or in an internal network
* and the application doesn't have any authentication, it expects that any request from the same network can be trusted.

## Example Attack { #example-attack }

Imagine you build a way to run a local AI agent.

It provides an API at

```

**To Reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Environment (please complete the following information):**
 - OS: [e.g. Windows 10]

        int len = invokeProtectedInt(obj, "writeParameterWordsWireFormat", buf, 0);

        // Expected size: 2 (sendBuffer) + 2 (mpxCount) + 2 (vcNumber) + 4 (sessionKey) + 2 (blob length) + 4 (reserved) + 4 (capabilities)
        int expected = 2 + 2 + 2 + 4 + 2 + 4 + 4;
        assertEquals(expected, len);

        int off = 0;
        assertEquals(65535, SMBUtil.readInt2(buf, off));
        off += 2;

    cls: Any, class_or_tuple: type[_T] | tuple[type[_T], ...] | None
) -> TypeGuard[type[_T]]:
    try:
        return isinstance(cls, type) and issubclass(cls, class_or_tuple)  # type: ignore[arg-type]
    except TypeError:  # pragma: no cover
        if isinstance(cls, WithArgsTypes):
            return False
        raise  # pragma: no cover


def _annotation_is_sequence(annotation: type[Any] | None) -> bool:

			if res.StatusCode != expectStatus {
				t.Errorf("Expected status %d, got %d", expectStatus, res.StatusCode)
			}

			if contentType != "" {
				if ct := res.Header.Get("Content-Type"); ct != contentType {
					t.Errorf("Expected Content-Type %q, got %q", contentType, ct)
				}
			}

			if res.StatusCode < 400 {
				if string(respBody) != lambdaBody {
					t.Errorf("Expected body %q, got %q", lambdaBody, string(respBody))

		}

		for _, name := range []string{"Name", "Constraint"} {
			if reflect.ValueOf(result).FieldByName(name).Interface() != reflect.ValueOf(v).FieldByName(name).Interface() {
				t.Errorf(
					"check %v %v should equal, expects %v, got %v",
					k, name, reflect.ValueOf(result).FieldByName(name).Interface(), reflect.ValueOf(v).FieldByName(name).Interface(),
				)
			}
		}
	}
}

func TestParseUniqueConstraints(t *testing.T) {

/*
 * Copyright (C) 2019 The Guava Authors
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
 * in compliance with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed under the License

        :param data: string data to be parsed.
        :return: Returns an STSElement.
        """
        try:
            return cls(root_name, cElementTree.fromstring(data))
        except _ETREE_EXCEPTIONS as error:
            raise InvalidXMLError(
                '"{}" XML is not parsable. Message: {}'.format(
                    root_name, error.message
                )
            )

                (byte) 0x0b, (byte) 0x0b, (byte) 0x0b, (byte) 0x0b, (byte) 0x0b, (byte) 0x0b, (byte) 0x0b };
        byte[] data = "Hi There".getBytes();

        // Calculate expected HMACT64 result manually
        MessageDigest md5 = MessageDigest.getInstance("MD5");
        byte[] ipad = new byte[64];
        byte[] opad = new byte[64];

                2.0 and the Server Side Public License, v 1; you may not use this file except
                in compliance with, at your election, the Elastic License 2.0 or the Server
                Side Public License, v 1.'''.stripIndent()
            }
            Elastic {
              keyword = '2.0; you may not use this file except in compliance with the Elastic License'
              notice = '''\