Jakub Zych 5ed920b7b1 test(02-05): cover proxy, scrub and CLI security boundaries ...

- Reject non-loopback bind/upstream, cap bodies, isolate concurrent sessions and refuse traversal
- Scrub JWT, inv_ tokens, cookies, client secrets and OAuth codes out of fixtures
- CLI discovery and replay errors exit nonzero without printing secrets

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-17 14:06:40 +02:00

13 KiB

Raw Blame History

View Raw