Repository navigation

test(security): cover the boundaries the live MCP suite can't reach - #391

Merged

dkackman merged 7 commits into

test/security-gaps

Sep 24, 2026

Commits on Sep 24, 2026

test(security): token, Origin/Host and ungated static routes
claude
committed
1c5ff80
test(security): trust gate refuses before any import, and trust lets it through
claude
committed
851c051
test(security): planted symlinks and download_output destinations
claude
committed
5b65186
test(security): decoder bombs through get_output_image and gallery routes
claude
committed
066d206
test(security): SSRF address spellings, redirects and HF token scope
claude
committed
7ee72d2
test(security): documented input caps refused before any work
claude
committed
b5aa656
Merge remote-tracking branch 'origin/develop' into test/security-gaps
claude
committed
9969359