Nguyen Thanh Dat 8d6f91b558 fix(security): refuse proxy-authorization and proxy-authenticate upstream (#11328) ...

Validated on a 17-PR combined board: upstream-headers-proxy-auth within the board's 287/287, typecheck:core clean, gates within baseline. proxy-authorization and proxy-authenticate join the FORBIDDEN denylist — forwarding proxy-authorization to a model provider would hand that provider the operator's own proxy credential. Thank you @ntdat812!

2026-08-24 01:49:37 -03:00

..

_helpers

…

_setup

…

benchmarks

…

boundary

…

e2e

…

fixtures

…

golden-set

…

helpers

…

homolog

…

integration

fix(tests): drain base-red cluster from 2026-08-23 merges (#9985) (#11280)

2026-08-23 20:32:46 -03:00

live

…

llm-security

…

load

…

manual

…

security

…

snapshots

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

translator

…

unit

fix(security): refuse proxy-authorization and proxy-authenticate upstream (#11328)

2026-08-24 01:49:37 -03:00

_cp_mock_hook.mts

…

_cp_mock_module.mts

…

_run_dns_guard_test.sh

…

e2e-tool-calls.sh

…

theoldllm-stress.test.ts

…