app = FastAPI()


class CustomORJSONResponse(Response):
    media_type = "application/json"

    def render(self, content: Any) -> bytes:
        assert orjson is not None, "orjson must be installed"
        return orjson.dumps(content, option=orjson.OPT_INDENT_2)


@app.get("/", response_class=CustomORJSONResponse)
async def main():

    /**
     * Retrieves the list of installed plugins.
     *
     * @return JSON response containing installed plugin list
     */
    // GET /api/admin/plugin/installed
    @Execute
    public JsonResponse<ApiResult> get$installed() {
        final List<Map<String, String>> list = getAllInstalledArtifacts();

Como está em execução localmente e não na Internet aberta, você decide não configurar autenticação, confiando apenas no acesso à rede local.

Então um de seus usuários poderia instalá-lo e executá-lo localmente.

Em seguida, poderia abrir um site malicioso, por exemplo:

```
https://evilhackers.example.com
```

        public final boolean isComposeAvailable;

        /**
         * True if the installed Docker version is >= 17.05
         */
        public final boolean isVersionHighEnough;

        /**
         * The path to the Docker CLI, or null
         */
        public final String path;

        /**
         * The installed Docker version, or null
         */
        public final Version version;

/**
 * Integration tests for the Popular Words API (/api/v1/popular-words)
 */
@Tag("it")
public class PopularWordsApiTests extends ITBase {

    @BeforeAll
    protected static void initAll() {
        RestAssured.baseURI = getFessUrl();
        settingTestToken();
    }

    @AfterAll
    protected static void tearDownAll() {
        deleteTestToken();
    }

    @Test

/**
 * Integration tests for the Suggest Words API (/api/v1/suggest-words)
 */
@Tag("it")
public class SuggestWordsApiTests extends ITBase {

    @BeforeAll
    protected static void initAll() {
        RestAssured.baseURI = getFessUrl();
        settingTestToken();
    }

    @AfterAll
    protected static void tearDownAll() {
        deleteTestToken();
    }

    @Test

._*
.nfs.*
[56789a].out
*~
*.orig
*.rej
*.exe
.*.swp
core
*.cgo*.go
*.cgo*.c
_cgo_*
_obj
_test
_testmain.go

/VERSION.cache
/bin/
/build.out
/doc/articles/wiki/*.bin
/goinstall.log
/last-change
/misc/cgo/life/run.out
/misc/cgo/stdio/run.out
/misc/cgo/testso/main
/pkg/
/src/*.*/
/src/_artifacts/
/src/cmd/cgo/zdefaultcc.go
/src/cmd/dist/dist
/src/cmd/go/internal/cfg/zdefaultcc.go

    private static final String TEST_LABEL_VALUE = "labelsApiTest_value";
    private static String testLabelId;

    @BeforeAll
    protected static void initAll() {
        RestAssured.baseURI = getFessUrl();
        settingTestToken();
    }

    @AfterAll
    protected static void tearDownAll() {
        if (testLabelId != null) {
            deleteLabel(testLabelId);

            esUrlFilter.setSessionId(sessionId);
            esUrlFilter.setFilterType(INCLUDE);
            esUrlFilter.setUrl(url);
            urlFilterList.add(esUrlFilter);
        }
        insertAll(urlFilterList, OpType.INDEX);
        includeFilterCache.invalidate(sessionId);
    }

    /**
     * Adds an exclude URL filter for the specified session.
     *
     * @param sessionId The session ID.

labels.plugin_name=Nome
labels.plugin_version=Versão
labels.plugin_delete=Excluir
labels.plugin_install=Instalar
labels.plugin_install_title=Instalar plugin
labels.plugin_jar_file=Arquivo Jar
labels.plugin_local_install=Local
labels.plugin_remote_install=Remoto
labels.crud_button_install=Instalar
labels.storage_configuration=Armazenamento
labels.storage_name=Nome
labels.storage_size=Tamanho