Niccolò Parlanti 6210e0a920 test(echo): assert nosniff Content-Type on echo direct-response ...

Regression test for CVE-2026-43644, mirroring the TestStoreReadHandler_ContentType
test added in #463. Verifies the echoHandler direct-response branch returns
application/octet-stream, X-Content-Type-Options: nosniff, and a restrictive CSP
so an HTML payload cannot be MIME-sniffed and executed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-16 23:47:28 +02:00

..

grpc

Removed the whitespaces

2024-06-23 22:47:58 +05:30

http

test(echo): assert nosniff Content-Type on echo direct-response

2026-05-16 23:47:28 +02:00