By default, **FastAPI** uses strict `Content-Type` header checking for JSON request bodies, this means that JSON requests **must** include a valid `Content-Type` header (e.g. `application/json`) in order for the body to be parsed as JSON.

## CSRF Risk { #csrf-risk }

This default behavior provides protection against a class of **Cross-Site Request Forgery (CSRF)** attacks in a very specific scenario.

            + "|application/rdf\\+xml" //
            + "|application/pdf" //
            + "|application/x-freemind" //
            + "|text/xml" //
            + "|text/xml-external-parsed-entity)";

    // Pattern from fsFileRule in rule.xml
    private static final String FS_FILE_RULE_PATTERN = "(application/xml" //
            + "|application/xhtml\\+xml" //
            + "|application/rdf\\+xml" //

     * The supplied request may also refer to a single concrete version rather than a version range.
     * In this case though, the result contains simply the (parsed) input version, regardless of the
     * repositories and their contents.
     *
     * @param session the session to use
     * @param artifactCoordinates t
     * @return the version range resolution result

        // Verify parsed data
        Field addressArrayField = NodeStatusResponse.class.getDeclaredField("addressArray");
        addressArrayField.setAccessible(true);
        NbtAddress[] addresses = (NbtAddress[]) addressArrayField.get(response);
        assertNotNull(addresses);
        assertEquals(3, addresses.length);

        // Verify MAC address was parsed

        super("ECL0050", asArray(cause), cause);
    }

    /**
     * Creates a {@link ParseRuntimeException}.
     *
     * @param s the string that could not be parsed
     */
    public ParseRuntimeException(final String s) {
        super("ECL0051", asArray(s));
    }

            throw new IllegalStateException("Expected exactly 2 majors in parsed versions but found: " + majors);
        }
    }

    private void assertCurrentVersionMatchesParsed(Version currentVersionProperty) {
        if (currentVersionProperty.equals(currentVersion) == false) {
            throw new IllegalStateException(
                "Parsed versions latest version does not match the one configured in build properties. "

  )

private val BROWSER_COMPATIBLE_DATE_FORMATS =
  arrayOfNulls<DateFormat>(BROWSER_COMPATIBLE_DATE_FORMAT_STRINGS.size)

/** Returns the date for this string, or null if the value couldn't be parsed. */
fun String.toHttpDateOrNull(): Date? {
  if (isEmpty()) return null

  val position = ParsePosition(0)
  var result = STANDARD_DATE_FORMAT.get().parse(this, position)
  if (position.index == length) {

     *
     * @param input the input stream to read from
     * @param locationBuilder optional builder for creating input location objects
     * @return the parsed XML node
     * @throws XMLStreamException if there is an error parsing the XML
     */
    protected abstract XmlNode doRead(InputStream input, InputLocationBuilder locationBuilder)
            throws XMLStreamException;

      SimpleDateFormat("yyMMddHHmmss'Z'").apply {
        timeZone = utc
        set2DigitYearStart(Date(-631152000000L)) // 1950-01-01T00:00:00Z.
      }

    try {
      val parsed = dateFormat.parse(string)
      return parsed.time
    } catch (e: ParseException) {
      throw ProtocolException("Failed to parse UTCTime $string")
    }
  }

  internal fun formatUtcTime(date: Long): String {

        // When
        Type3Message parsed = new Type3Message(messageBytes);

        // Then
        // Note: getType() method does not exist, so we cannot compare message types
        assertEquals(original.getDomain(), parsed.getDomain());
        assertEquals(original.getUser(), parsed.getUser());
        assertEquals(original.getWorkstation(), parsed.getWorkstation());
    }

    @Test