Round 2 per Sage's notes revs 521 and 523: a repeated Host is 400 before
any check; HEADER with a Host other than NAME is 403 proxy Host refused;
HEAD, x.NAME and --auth-header tests; the README proxy contract lines.
Candidate manifest 17b6d7f6, base 17ea0dbc. 34 of 34 mutants killed;
gate green.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
37 lines
967 B
Plaintext
37 lines
967 B
Plaintext
partial-allowed killed
|
|
host-not-lowercased killed
|
|
header-not-lowercased killed
|
|
ip-allowed killed
|
|
host-header-allowed killed
|
|
user-comma-allowed killed
|
|
empty-object-serves killed
|
|
named-case-sensitive killed
|
|
named-prefix killed
|
|
named-hostname-only killed
|
|
origin-http-allowed killed
|
|
origin-public-on-loopback killed
|
|
header-check-skipped killed
|
|
two-values-allowed killed
|
|
value-prefix killed
|
|
value-case-insensitive killed
|
|
header-check-raw-name killed
|
|
readonly-named-only killed
|
|
readonly-post-only killed
|
|
readonly-always killed
|
|
cli-preview-dropped killed
|
|
cli-checked-late killed
|
|
repeated-host-allowed killed
|
|
repeated-host-preview-only killed
|
|
proxy-host-skipped killed
|
|
proxy-host-wrong-user-only killed
|
|
proxy-host-nonempty-only killed
|
|
proxy-host-get-only killed
|
|
proxy-host-loopback-only killed
|
|
proxy-host-raw-name killed
|
|
header-check-skips-head killed
|
|
head-refused killed
|
|
header-leading-dash killed
|
|
header-underscore killed
|
|
worktree diff after: clean
|
|
summary 34 of 34 killed
|