fix(security): complete + regression-test HTTP 500 info-disclosure hardening - #820

Closed

groupthinking wants to merge 9 commits into

mainfrom

claude/determined-maxwell-e9hha1

Commits on Jul 17, 2026

fix(security): sanitize all HTTP 500 responses to prevent info disclosure (supersedes #801)
claude
committed
31804b9
fix: resolve main merge conflicts
Copilot
authored
4c9b205
fix(security): close dict/variable 500-detail leaks and harden the guard
claude
committed
448fe68
fix(security): address review — global handler leak, persisted-error leak, 400→500 swallow
claude
committed
93d4847
fix(security): close positional + Ray-Serve 500 leaks, fix stale tests, complete guard
claude
committed
d78c9c3
test(security): make the 500 guard reject string-concatenation leaks via AST
claude
committed
ec32df9
test(security): assert sanitized 500 body in ml_serve checkpoint failure
claude
committed
3f6f496
Merge remote-tracking branch 'origin/main' into claude/determined-maxwell-e9hha1
claude
committed
30f1265
test(security): rewrite 500-leak guard as AST analysis (addresses review)
claude
committed
2d027d8