Jakub Zych 0b8e027b81 test(19.7-05): security review pins for the MCP endpoint's outer layers ...

- TestEndpointGuards: a foreign browser Origin is 403 before the bearer is
  read, a body over the endpoint cap is 413, a long GET stream ends once
  its grant stops verifying (T-19.7-18, T-19.7-19)
- TestDispatch: an argument key the input struct does not declare is
  refused before dispatch (T-19.7-17)
- the gate requires TestEndpointGuards (untagged and tagged) and runs the
  demo's deploy check (T-19.7-37)

2026-10-23 14:26:26 +02:00

33 KiB

Executable File

Raw Blame History

View Raw