Refuse deploy, job and scratch tokens on taken-down repositories, pass WebSocket upgrades through site hardening, and cache the avatar takedown check per isolate for a minute, failing closed.

taigrrcommitted parent 76872df89d2a0e7d5b4e23e67e6fd3b8981354fde907ed4Browse files
9 files changed+242−13

Rendering diff…