======================================================================
single.json  (http://127.0.0.1:9091/single.json)  [URL_REQUEST source 97]
  Response X-Content-Type-Options headers (1):
    X-Content-Type-Options: nosniff
  Body bytes read by URL_REQUEST: 0
  -> ORB BLOCKED (correct)
======================================================================
double.json  (http://127.0.0.1:9091/double.json)  [URL_REQUEST source 103]
  Response X-Content-Type-Options headers (2):
    X-Content-Type-Options: nosniff
    X-Content-Type-Options: nosniff
  Body bytes read by URL_REQUEST: 53
  Body content: '[{"email":"secret@victim.example","token":"abc123"}]\n'
  -> ORB ALLOWED -> body leaked to renderer (BUG TRIGGERED)
======================================================================
RESULT: BUG REPRODUCED