✔ GET preserves asset body and applies restrictive security headers (5.499051ms)
✔ HEAD returns headers with no body (1.136201ms)
✔ writes rejected before assets binding (0.555346ms)
✔ source and dotfile paths are denied (1.300428ms)
✔ unknown page remains a 404 with security headers (0.984162ms)
ℹ tests 5
ℹ suites 0
ℹ pass 5
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 89.443836