fix(security): re-land CWE-209 response protections from closed PR #831 - #1690

Draft

linear-code[bot] wants to merge 14 commits into

mainfrom

execution-remove-cwe-209-response-body-leaks-pr-831-grv-94-91c5

Commits on Jul 21, 2026

fix(security): sanitize exception text in non-500 response bodies (CWE-209)
claude
committed
d14e7de
test(security): track exception aliases in response-body guard
claude
committed
edeb0cf
fix(security): close remaining CWE-209 read-boundary gaps
groupthinking
committed
cbe08d4
fix(security): close remaining CWE-209 pass-through bypasses
groupthinking
committed
78526ea
fix(security): sanitize plural errors list and nested ai_analysis (CWE-209)
claude
committed
8e3260d
test(security): cover annotated processor pass-throughs
groupthinking
committed
bb83fcd
fix(security): close remaining response leak guards
groupthinking
committed
b4597bd
fix(security): sanitize complete cloud result trees
groupthinking
committed
bed22ff

Commits on Jul 24, 2026

Commits on Jul 28, 2026

fix: restore CWE-209 guards on current main
groupthinking
committed
15f6341
test: align sanitized invalid URL response
groupthinking
committed
eef5da0
merge: refresh canonical #831 onto verified main
groupthinking
committed
1a0ce65

Commits on Sep 8, 2026

Merge PR #831 CWE-209 protections onto current main (partial conflict resolution)

Linear
and
linear-code[bot]
committed
12e09d8