[ { "id": "ed69554c53210704c98c-aa6114ab653335b0849c", "project": "", "file": "production.spec.ts", "title": "unsafe production CORS overrides fail before the API starts listening", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 316, "errors": [], "attachments": [] } ] }, { "id": "ed69554c53210704c98c-b5aa0dee57975d249ef8", "project": "", "file": "production.spec.ts", "title": "production CORS defaults to the canonical origin, never localhost or arbitrary origins", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 54, "errors": [], "attachments": [] } ] }, { "id": "ed69554c53210704c98c-f08f9970acd7897ea78b", "project": "", "file": "production.spec.ts", "title": "forwarded host cannot replace Host and internal liveness does not expose other routes", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 19, "errors": [], "attachments": [] } ] }, { "id": "ed69554c53210704c98c-a22e20df1ecd17804b5c", "project": "", "file": "production.spec.ts", "title": "forged forwarding scheme cannot downgrade canonical HTTPS cookie security", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 19, "errors": [], "attachments": [] } ] }, { "id": "ed69554c53210704c98c-1cbee69d1531ff47c6ff", "project": "", "file": "production.spec.ts", "title": "untrusted direct source cannot reset its IP allowance using IP, scheme or host forwarding", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 68, "errors": [], "attachments": [] } ] }, { "id": "ed69554c53210704c98c-3f2473964eebe1793601", "project": "", "file": "production.spec.ts", "title": "trusted proxy gives two real clients independent IP allowances and ignores leftmost extra hops", "status": "expected", "results": [ { "status": "passed", "retry": 0, "durationMs": 30, "errors": [], "attachments": [] } ] } ]