The "[::1].evil.test" rows only raise in urlparse on Python 3.14; on the
3.11-3.13 interpreters the repo supports, the media proxy answers 403 and
the custom endpoint saves (200), so those rows fail outside 3.14. Drop
them; the "[::1" and "[not-an-ip]" rows still pin the fix.
Replace the new 111-line test_web_server_ws_origin.py (a full
login/ticket/heartbeat matrix that re-tests existing auth) with two
malformed-origin rows on the existing gated cross-site origin test.
995d9e3613