docs(redesign): accept Phase 6 review and prepare Phase 7 handoff

2026-10-11 15:40:45 +02:00
parent badfb19d90
commit 4669fb42e6
21 changed files with 20489 additions and 14 deletions
@@ -0,0 +1,111 @@
+{
+  "command": {
+    "name": "ingress",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=playwright.ingress.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\ingress-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:25.696411+00:00",
+    "finishedUtc": "2026-10-11T09:19:32.673527+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:26.256Z",
+      "duration": 6375.89,
+      "expected": 6,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "7cd85a5aad945f8dc0cea5cd42cd90ed4bc72d83be9b32835e64b93e8196216b",
+  "logSha256": "b1ac46bc04db2b242314a0a8a6457383c0b7349cfc48e04ac42da4fe8c401b34",
+  "stats": {
+    "startTime": "2026-10-11T09:19:26.256Z",
+    "duration": 6375.89,
+    "expected": 6,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "unsafe production CORS overrides fail before the API starts listening",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 328
+        }
+      ]
+    },
+    {
+      "title": "production CORS defaults to the canonical origin, never localhost or arbitrary origins",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 58
+        }
+      ]
+    },
+    {
+      "title": "forwarded host cannot replace Host and internal liveness does not expose other routes",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 20
+        }
+      ]
+    },
+    {
+      "title": "forged forwarding scheme cannot downgrade canonical HTTPS cookie security",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 25
+        }
+      ]
+    },
+    {
+      "title": "untrusted direct source cannot reset its IP allowance using IP, scheme or host forwarding",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 77
+        }
+      ]
+    },
+    {
+      "title": "trusted proxy gives two real clients independent IP allowances and ignores leftmost extra hops",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 46
+        }
+      ]
+    }
+  ]
+}