Second review of #30: `startsWith("Bearer")` followed by slice(7) would accept any byte as the separator (`Bearer\t<token>`, `BearerX<token>`) and the suite stayed green. Two MALFORMED cases now reject both; the mutation turns them red. Refs #17 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| agent.test.js | ||
| auth.test.js | ||
| findings.test.js | ||
| health.test.js | ||
| hosts.test.js | ||
| state.test.js | ||