mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-21 06:32:16 +03:00
9df2e68fb6
The model-allowlist test (from the allowlist/timeout-clamp commit) and the loopback/LAN guard (from the security-guard commit) were written independently against diverging histories of this PR and didn't know about each other — cherry-picking both here exposed the gap: this one test still called handleCursorAgentImageGeneration without peerLocality, so the guard's fail-closed default rejected it with 403 before reaching the argv-sanitization logic the test actually exercises. Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>