evawong-oai 0bd34c28c7 Add wildcard in the middle test coverage (#15813) ...

## Summary
Add a focused codex network proxy unit test for the denylist pattern
with wildcard in the middle `region*.some.malicious.tunnel.com`. This
does not change how existing code works, just ensure that behavior stays
the same and we got CI guards to guard existin behavior.

## Why
The managed Codex denylist update relies on this mid label glob form,
and the existing tests only covered exact hosts, `*.` subdomains, and
`**.` apex plus subdomains.

## Validation
`cargo test -p codex-network-proxy
compile_globset_supports_mid_label_wildcards`
`cargo test -p codex-network-proxy`
`./tools/argument-comment-lint/run-prebuilt-linter.sh -p
codex-network-proxy`

2026-03-26 17:53:31 +00:00

..

certs.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

config.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

http_proxy.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

lib.rs

…

mitm_tests.rs

fix: reject global wildcard network proxy domains (#13789)

2026-03-06 21:06:24 +00:00

mitm.rs

…

network_policy.rs

…

policy.rs

Add wildcard in the middle test coverage (#15813)

2026-03-26 17:53:31 +00:00

proxy.rs

fix(network-proxy): serve HTTP proxy listener as HTTP/1 (#14395)

2026-03-11 14:35:44 -07:00

reasons.rs

…

responses.rs

…

runtime.rs

Allow global network allowlist wildcard (#15549)

2026-03-24 10:43:46 -04:00

socks5.rs

…

state.rs

Allow global network allowlist wildcard (#15549)

2026-03-24 10:43:46 -04:00

upstream.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00