{
  "all_cases_passed": true,
  "cases": [
    {
      "authenticated_escape": {
        "body_sha256": "77551c4b9a8c129c60e4e1e80ac194141074727b260ae6b8495e7b9cdf10ec37",
        "cookie_sent": true,
        "equals_outside_canary": true,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_1_vulnerable.txt",
        "status": 200
      },
      "inside_control": {
        "body_sha256": "015283195a77eaa66b35c37a5dcbcb9254d1a29c0348a454bee273fcae78fdcf",
        "equals_inside_canary": true,
        "raw_request_target": "/media/inside_37b60d788b1e_1_vulnerable.txt",
        "status": 200
      },
      "login_via_product": true,
      "role": "vulnerable",
      "round": 1,
      "source_commit": "61bd5173220d19925ad8220db9152a75c881ea73",
      "unauthenticated_escape": {
        "authorization_sent": false,
        "body_sha256": "77551c4b9a8c129c60e4e1e80ac194141074727b260ae6b8495e7b9cdf10ec37",
        "cookie_sent": false,
        "equals_outside_canary": true,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_1_vulnerable.txt",
        "referer": "http://attacker.invalid/login",
        "status": 200
      }
    },
    {
      "authenticated_escape": {
        "body_sha256": "20a479b77ec80b429c65ba8b4ceca8f0fc583491bc16198c6a214ee4fb43182a",
        "cookie_sent": true,
        "equals_outside_canary": false,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_1_fixed.txt",
        "status": 404
      },
      "inside_control": {
        "body_sha256": "b247e94362b9ab7c953490161e9e17452f010cb5f2821acd063d1add262f8ae4",
        "equals_inside_canary": true,
        "raw_request_target": "/media/inside_37b60d788b1e_1_fixed.txt",
        "status": 200
      },
      "login_via_product": true,
      "role": "fixed",
      "round": 1,
      "source_commit": "b3bd29d15819cbece45c58e6268ddd0614e387d6",
      "unauthenticated_escape": {
        "authorization_sent": false,
        "body_sha256": "20a479b77ec80b429c65ba8b4ceca8f0fc583491bc16198c6a214ee4fb43182a",
        "cookie_sent": false,
        "equals_outside_canary": false,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_1_fixed.txt",
        "referer": "http://attacker.invalid/login",
        "status": 404
      }
    },
    {
      "authenticated_escape": {
        "body_sha256": "c57c622fb0b30ed900c2fea7ba3e3ce1319d027a7e4f3e86e040987aa67cdea2",
        "cookie_sent": true,
        "equals_outside_canary": true,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_2_vulnerable.txt",
        "status": 200
      },
      "inside_control": {
        "body_sha256": "002509322b22436b529db9ca6fc110fb47393e4e334205b5ad36c6b9ff075550",
        "equals_inside_canary": true,
        "raw_request_target": "/media/inside_37b60d788b1e_2_vulnerable.txt",
        "status": 200
      },
      "login_via_product": true,
      "role": "vulnerable",
      "round": 2,
      "source_commit": "61bd5173220d19925ad8220db9152a75c881ea73",
      "unauthenticated_escape": {
        "authorization_sent": false,
        "body_sha256": "c57c622fb0b30ed900c2fea7ba3e3ce1319d027a7e4f3e86e040987aa67cdea2",
        "cookie_sent": false,
        "equals_outside_canary": true,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_2_vulnerable.txt",
        "referer": "http://attacker.invalid/login",
        "status": 200
      }
    },
    {
      "authenticated_escape": {
        "body_sha256": "7819d7f01cf11f8f342d6c48d53b09992f59771bd795cbd853464ce1bf4b204c",
        "cookie_sent": true,
        "equals_outside_canary": false,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_2_fixed.txt",
        "status": 404
      },
      "inside_control": {
        "body_sha256": "cb889d94d4e0a576f49acacc1e17f527b8f01fd6c8a694d8b24ac12482054210",
        "equals_inside_canary": true,
        "raw_request_target": "/media/inside_37b60d788b1e_2_fixed.txt",
        "status": 200
      },
      "login_via_product": true,
      "role": "fixed",
      "round": 2,
      "source_commit": "b3bd29d15819cbece45c58e6268ddd0614e387d6",
      "unauthenticated_escape": {
        "authorization_sent": false,
        "body_sha256": "7819d7f01cf11f8f342d6c48d53b09992f59771bd795cbd853464ce1bf4b204c",
        "cookie_sent": false,
        "equals_outside_canary": false,
        "raw_request_target": "/media/../../runtime/outside_37b60d788b1e_2_fixed.txt",
        "referer": "http://attacker.invalid/login",
        "status": 404
      }
    }
  ],
  "schema_version": 1
}