fix(security): HTTP-500 info-disclosure hardening + preserve 4xx/tracebacks (consolidation) - #816

Closed

groupthinking wants to merge 8 commits into

mainfrom

claude/determined-maxwell-lxth4b

Commits on Jul 17, 2026

fix(security): sanitize all HTTP 500 responses to prevent info disclosure (supersedes #801)
claude
committed
31804b9
fix: resolve main merge conflicts
Copilot
authored
4c9b205
fix(security): close remaining dict/variable 500 info-disclosure leaks in cloud/real routers
claude
committed
f25030c
test: assert 500 responses do not leak internal state (align with sanitization)
claude
committed
321d963
fix(api): preserve 4xx HTTPExceptions and full tracebacks in sanitized 500 handlers
claude
committed
9a3b957
Merge remote-tracking branch 'origin/main' into claude/determined-maxwell-lxth4b
claude
committed
941677c
fix(security): close global 500 handler leak, fix unreachable handlers, harden guard
claude
committed
4cee0ad
test(main): assert global 500 handler does not leak; keep static version metadata
claude
committed
06fa2ad