What does this fix?

Fixes incorrect dumper selection when Accept: */* header is present in HTTP requests, causing dd() and dump() output to disappear in browsers.

The Problem

Since version 7.4.0 (PR #58070), when an HTTP request includes Accept: */* header, the dumper selection logic incorrectly chooses CliDumper instead of HtmlDumper. This causes dumps to be sent to STDOUT instead of being rendered in the browser response.

Affected scenario:

// Browser makes request with Accept: */*
// dd(['test' => 123]) produces blank page instead of showing dump

Common with:

• AJAX requests without explicit Accept header
• API clients (Postman, Insomnia)
• cURL without -H "Accept: text/html"
• PHP-FPM environments

Root Cause

Current code only checks if Accept contains literal string 'html':

str_contains($_SERVER['HTTP_ACCEPT'], 'html') ? new HtmlDumper() : new CliDumper()

According to RFC 9110 Section 12.5.1, */* means "accept any media type", including text/html.

Solution

Added explicit check for wildcard pattern:

$accept = $_SERVER['HTTP_ACCEPT'] ?? (\in_array(\PHP_SAPI, ['cli', 'phpdbg', 'embed'], true) ? 'txt' : 'html');
$dumper = (str_contains($accept, 'html') || str_contains($accept, '*/*')) ? new HtmlDumper() : new CliDumper();

Before: Accept: */* → ❌ CliDumper (blank page)
After: Accept: */* → ✅ HtmlDumper (dump visible)

Backward Compatibility

✅ Fully backward compatible - only fixes broken behavior introduced in 7.4.0

Test coverage:

• Accept: text/html → HtmlDumper (unchanged)
• Accept: */* → HtmlDumper (fixed)
• Accept: application/json → CliDumper (unchanged)
• CLI SAPI → CliDumper (unchanged)