{
 "title": "Leak test of The Attending masking tool page",
 "run": "8 October 2026, Chromium, the page file deidentify.html sha256 ef2ddebfce29",
 "method": "A local test server counts every request it receives. A control page without the tool's content security policy contacts the server first, to prove the server can see a request. Then the tool page makes seven deliberate attempts to send text out: fetch, XMLHttpRequest, sendBeacon, an image, a WebSocket, a prefetch link and an external script.",
 "control_hits": 3,
 "server_hits_from_tool_page": 0,
 "raw": {
  "control_hits": [
   [
    "GET",
    "/control-nav"
   ],
   [
    "GET",
    "/favicon.ico"
   ],
   [
    "GET",
    "/control-fetch"
   ]
  ],
  "attempts": {
   "fetch": "error: Failed to fetch",
   "beacon": true
  },
  "server_hits_from_tool_page": [],
  "requestfailed": [
   [
    "http://127.0.0.1:8765/xhr",
    "csp"
   ],
   [
    "http://127.0.0.1:8765/prefetch",
    "csp"
   ],
   [
    "http://127.0.0.1:8765/script.js",
    "csp"
   ],
   [
    "http://127.0.0.1:8765/img",
    "csp"
   ]
  ],
  "request_events_other_than_file": [
   "http://127.0.0.1:8765/xhr",
   "http://127.0.0.1:8765/prefetch",
   "http://127.0.0.1:8765/script.js",
   "http://127.0.0.1:8765/img"
  ]
 }
}