---
id: c8cc1664-38ab-42e7-ab68-936330a70f1e
author: null
created: 2026-10-27T19:53:10.405622601Z
---
Fixed in PR #61 (`3df93c3a-bd5e-43f4-bb73-0f3dd886eeb1`, commit `ee6e71b`, merged `e834a46`). CI run `2026-10-27T19-50-04.907798288Z` passed; full `cargo test`, `node --test tests/pages_inbox.test.mjs`, fmt, and clippy green.

`_headers` now emits `/releases/:version/*` (one named placeholder + one splat). Wrangler 4.154.0 reports "Parsed 3 valid header rules"; `/releases/v1/evil.html` 308→`/releases/v1/evil` 200 with `Content-Disposition: attachment`, and `.svg`/`.txt` artifacts also download. Regression test `tests/review5_hardening.rs::pages_headers_use_one_splat_for_artifacts`.