fix(security): sanitize HTTP 500 responses to prevent info disclosure - #814

Closed

groupthinking wants to merge 11 commits into

mainfrom

claude/determined-maxwell-dczolv

Commits on Jul 17, 2026

fix(security): sanitize all HTTP 500 responses to prevent info disclosure (supersedes #801)
claude
committed
31804b9
fix: resolve main merge conflicts
Copilot
authored
4c9b205
fix(security): close remaining dict/variable 500 info-disclosure leaks in cloud/real routers
claude
committed
f25030c
test: assert 500 responses do not leak internal state (align with sanitization)
claude
committed
321d963
fix(security): preserve tracebacks, keep 4xx, and stop persisted-state leak
claude
committed
4d14e96
test: AST-based 500-leak guard + tighten search-limit assertion
claude
committed
9c90eb2
test: 500-leak guard also recognizes symbolic status constants
claude
committed
9dd7107
fix(security): make analyze_video subclass handlers reachable + sanitize 503/429
claude
committed
6c37560
fix(security): sanitize persisted error_message at status/result response boundary
claude
committed
52f0a26
test: regression-cover the sanitized 429/503 branches of analyze_video
claude
committed
9767f2d
Merge remote-tracking branch 'origin/main' into claude/determined-maxwell-dczolv
claude
committed
42e9ff9