test	role	version	http_code	duration_s	note
getAll_false	vuln	26.04.28-02	200	0.063131	baseline (expect fast)
getAll_true	vuln	26.04.28-02	200	5.015084	time-based SQLi (expect ~5s)
get_bundleId	vuln	26.04.28-02	404	0.007983	GET bundleId payload
getAll_false	fixed	26.04.28-03	401	0.064403	fixed (no unauthenticated SQLi)
getAll_true	fixed	26.04.28-03	401	0.007937	fixed (no unauthenticated SQLi)
get_bundleId	fixed	26.04.28-03	404	0.007793	fixed (no unauthenticated SQLi)