Matt Miller e4eb7f2698 security: address review feedback on GHSA-779p fixes ... - Fix Windows CI failure in test_get_annotated_filepath: compare against os.path.abspath(...) to match the intentional abspath normalization added by the traversal hardening (abspath prepends the drive letter on Windows). - origin_check: narrow the bare `except:` in is_loopback() to ValueError so genuine interrupts aren't swallowed (review nit). - origin_check: guard .port access in is_cross_origin_forbidden() so a malformed/out-of-range port (e.g. Origin: http://127.0.0.1:99999) fails closed with a 403 instead of surfacing an uncaught 500 in the middleware. - server /view: escape backslash/quote in the Content-Disposition filename (RFC 6266 quoted-string) so a filename containing a double quote can't malform the response header.		2026-07-02 19:58:06 -07:00
..
folder_path_test.py	security: address review feedback on GHSA-779p fixes	2026-07-02 19:58:06 -07:00
model_detection_test.py	Revert "Add SeedVR2 support (CORE-6) (#14110)" (#14359)	2026-06-08 18:00:20 -04:00