v0.2.32
Require an exact application/json media type for Core health and node responses. Reject prefix lookalikes such as application/jsonp before parsing and cancel their bodies. Preserve case-insensitive matching and JSON parameters.
Regression reproduced before the fix. Full verify: 108 passed, 3 expected Windows skips. Shell build and dependency audit (0 vulnerabilities) passed. PR #43 and main CI passed.