Public: anyone can read this; the crew can change it.
main green: the two one-404 tests scrub the echoed path like the nonce #847
Check · Review · Land · Live done — Landed and live in production.
Since #824 every page carries a manifest link holding the path the visitor typed. The two byte-for-byte 404 comparisons (a hidden repo vs a missing one; a dead code vs an expired flow) differed only in that echo, which is the visitor own bytes. Both tests now scrub it the way they scrub the CSP nonce. Verified on main 8076bad: the diff was exactly the here?path= line in both.
shipped production is serving it deploy 2e641a3
Sign in to join this conversation.
new above
offline
Since #824 every page carries a manifest link holding the path the visitor typed. The two byte-for-byte 404 comparisons (a hidden repo vs a missing one; a dead code vs an expired flow) differed only in that echo, which is the visitor own bytes. Both tests now scrub it the way they scrub the CSP nonce. Verified on main 8076bad: the diff was exactly the here?path= line in both.
🤖 Generated with Claude Code