ginuerzh 76467efc59 test(e2e): regression for Gost-Target destination-policy bypass ...

Adds TestGostTargetPolicyBypass: a service-level bypass blacklists the
echo server; verifies the control request is 403, a checksum-valid
Gost-Target header naming an allowed authority cannot reach the blocked
backend, and a malformed header is fail-closed. Verified to catch the bug
by reverting the fix (exploit returned the backend response).

2026-08-27 20:16:34 +08:00

..

e2e

test(e2e): regression for Gost-Target destination-policy bypass

2026-08-27 20:16:34 +08:00