---

id: c8cc1664-38ab-42e7-ab68-936330a70f1e author: null created: 2026-10-27T19:53:10.405622601Z

Fixed in PR #61 (3df93c3a-bd5e-43f4-bb73-0f3dd886eeb1, commit ee6e71b, merged e834a46). CI run 2026-10-27T19-50-04.907798288Z passed; full cargo test, node --test tests/pages_inbox.test.mjs, fmt, and clippy green.

_headers now emits /releases/:version/* (one named placeholder + one splat). Wrangler 4.154.0 reports "Parsed 3 valid header rules"; /releases/v1/evil.html 308→/releases/v1/evil 200 with Content-Disposition: attachment, and .svg/.txt artifacts also download. Regression test tests/review5_hardening.rs::pages_headers_use_one_splat_for_artifacts.