3.2.3 - 严重 - 未处理
[HTTP_ACCEPT] => text/html,application/xhtml+xm每个类型都有权重,在此例中应优先选中text/html或application/xhtml+xm
而getAcceptType方法中循环$type数组
$type = array(
'xm
'json' => 'application/json,text/x-json,application/jsonrequest,text/json',
'js' => 'text/ja
'css' => 'text/css',
'rss' => 'application/rss+xm
'yaml' => 'application/x-yaml,text/yaml',
'atom' => 'application/atom+xm
'pdf' => 'application/pdf',
'text' => 'text/plain',
'png' => 'image/png',
'jpg' => 'image/jpg,image/jpeg,image/pjpeg',
'gif' => 'image/gif',
'csv' => 'text/csv',
'html' => 'text/html,application/xhtml+xm
);
此数组xm
但其实本次访问只是一次浏览器的普通访问,资源类型本应是html
