FA-29063 / HTTP redirects / Member archive
Build public redirect origins from explicitly trusted proxy metadata: prefix not authority · case 03
Build public redirect origins from explicitly trusted proxy metadata: the prefix not authority branch emits an incorrect decision.
Case contract
Build public redirect origins from explicitly trusted proxy metadata. The explicit fixture inputs and outputs define a bounded offline policy; request identity must accompany the decision.
Why this case matters
Models a redirect controller decision before following a target or exposing a redirect result.
One recorded failure
Sample boundary fixtureThis sample comes from the broken implementation of a controlled reproducer.
| Boundary fixture | Actual | Expected | Outcome |
|---|---|---|---|
| fixture 5 | {"decision": ["public.test", "https", ["public.test"], true, "//evil.test", "//evil.test", "internal", "//evil.test/", true, "forwarded"], "request": "/requests/3/4"} | {"decision": ["public.test", "https", ["public.test"], true, "/evil.test", "//evil.test", "internal", "//evil.test/", true, "forwarded"], "request": "/requests/3/4"} | Failed |
MEMBER ARCHIVE
The complete case is available to members.
This record includes three runnable implementations, regression fixtures, execution results, and source hashes.
Member access is invitation-based. Sign in with your invited account to inspect the sources.
Sign in to the archive ↗