liqiang
b119135836
Build latest book artifacts / build (push) Canceled after 0s
dependency resolution / resolve (3.11) (push) Canceled after 0s
dependency resolution / resolve (3.13) (push) Canceled after 0s
deploy-pages / build (push) Canceled after 0s
deploy-pages / deploy (push) Canceled after 0s
i18n consistency check / check (push) Canceled after 0s
provider adoption tests / test (chapter2/context-compression) (push) Canceled after 0s
provider adoption tests / test (chapter2/prompt-injection) (push) Canceled after 0s
provider adoption tests / test (chapter2/system-hint) (push) Canceled after 0s
provider adoption tests / test (chapter3/log-sanitization) (push) Canceled after 0s
web-search-agent tests / test (push) Canceled after 0s
web-search-agent tests / agentbook (push) Canceled after 0s
24 lines
795 B
Python
24 lines
795 B
Python
"""Regression: quoted secret assignments must redact the full value, including spaces."""
|
|
from regex_sanitizer import sanitize
|
|
|
|
|
|
def test_double_quoted_password_with_spaces():
|
|
text, hits = sanitize('password="hunter 2 with spaces"')
|
|
assert "hunter" not in text
|
|
assert "spaces" not in text
|
|
assert "[REDACTED_SECRET]" in text
|
|
assert any(h["category"] == "secret_assignment" for h in hits)
|
|
|
|
|
|
def test_single_quoted_password_with_spaces():
|
|
text, hits = sanitize("api_key='test-api-key with spaces'")
|
|
assert "test-api-key" not in text
|
|
assert "ghi" not in text
|
|
assert "[REDACTED_SECRET]" in text
|
|
|
|
|
|
def test_unquoted_secret_still_redacted():
|
|
text, hits = sanitize("password=hunter2xyz")
|
|
assert "hunter2xyz" not in text
|
|
assert "[REDACTED_SECRET]" in text
|