JSON WAF Non-JS Client Test

Upload/extract so the root directory is:

json-test/

Main pages:
- /json-test/
- /json-test/php-curl-test.php
- /json-test/api-test.json

php-curl-test.php sends the request from PHP server-side cURL. It does not execute JavaScript, so it behaves like a non-JS client.

Important:
The WAF will see the request source as the hosting server running PHP, not the user's browser. That is fine for testing non-JS behavior, but it is not a Zscaler-client-path test.
