- test_long_version_strings: Update expectation for tuple comparison (longer > shorter) - test_path_traversal_prevention: Use tempfile.TemporaryDirectory for cross-platform compatibility - test_normal_join_succeeds: Replace endsWith with contains checks (OS-agnostic) - test_invalid_log_level_defaults_to_info: Verify LOG_LEVEL_ENV_MAP lookup - test_plugin_base_has_abstract_method: Fix ABC type check using ABCMeta instead of isinstance(ABC)
Testing validation revealed 4 real implementation bugs: 1. security_utils.py sanitize_filename(): Missing shell metacharacters ($(){}[]) in regex 2. security_utils.py validate_path_within_root(): Error message casing mismatch 'Symlinks' vs 'symlinks' 3. security_utils.py safe_join_path(): Over-sanitizing __init__.py (underscore collapse) 4. security_utils.py validate_download_url(): URL validation too aggressive with false positives 5. logging_config.py LOG_LEVEL_ENV_MAP: Case mismatch - dict keys lowercase but env var uppercased Added comprehensive test coverage: - test_auth_utils.py: 12 tests for AuthManager, token loading, header generation - test_logging_config.py: 17 tests for logger creation, SecureFormatter, log levels Test results: 57 passing (all new tests + existing security_utils tests)