Make the security checklist consider HTTP 403 as a correct response.
Review Request #5884 — Created May 27, 2014 and submitted — Latest diff uploaded
Some web server configurations may return HTTP 403 when trying to access
certain filetypes. In this case, we should consider that an acceptable response
when testing whether dangerous files can be executed.
Jury rigged up something to throw a 403 HTTPError for a certain file extension.
Saw that before this change, I could reproduce the bug. After, it claims that
everything passes.