Hide exception details in mock integration server responses

[Copilot]

This change addresses a CodeQL finding in the testing infrastructure where the mock HTTP agent server could return raw exception text to clients. The handler now returns a generic 500 response while preserving the existing failure path.

• Scope

  • Updates the mock server used by dev/microsoft-agents-testing integration tests.
  • Removes exception-message reflection from HTTP responses.

• Behavior change

  • Replaces externally visible exception text with a fixed internal error message.
  • Keeps the response contract simple and deterministic for error cases.

• Implementation

  except Exception:
      return Response(status=500, text="Internal server error")

[Copilot]

Pull request overview

This PR updates the dev/microsoft-agents-testing integration-test mock HTTP agent server to avoid reflecting raw exception text back to HTTP clients, addressing a security/code-scanning concern (e.g., CodeQL) while preserving the same error status behavior.

Changes:

• Replace Response(status=500, text=str(e)) with a fixed generic message ("Internal server error") when the mock server handler hits an unexpected exception.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

dev/microsoft-agents-testing/tests/core/test_integration.py:143

• The exception is no longer returned to the client (good), but it is now fully swallowed without being logged. That can make integration test failures difficult to diagnose because the only visible error becomes the generic 500 body.

        except Exception:
            return Response(status=500, text="Internal server error")