liqiang
b119135836
Build latest book artifacts / build (push) Canceled after 0s
dependency resolution / resolve (3.11) (push) Canceled after 0s
dependency resolution / resolve (3.13) (push) Canceled after 0s
deploy-pages / build (push) Canceled after 0s
deploy-pages / deploy (push) Canceled after 0s
i18n consistency check / check (push) Canceled after 0s
provider adoption tests / test (chapter2/context-compression) (push) Canceled after 0s
provider adoption tests / test (chapter2/prompt-injection) (push) Canceled after 0s
provider adoption tests / test (chapter2/system-hint) (push) Canceled after 0s
provider adoption tests / test (chapter3/log-sanitization) (push) Canceled after 0s
web-search-agent tests / test (push) Canceled after 0s
web-search-agent tests / agentbook (push) Canceled after 0s
37 lines
1.1 KiB
Python
37 lines
1.1 KiB
Python
"""Truncated PEM (BEGIN without END) must be redacted, not leaked."""
|
|
|
|
from regex_sanitizer import sanitize
|
|
|
|
PEM_HEADER = "-----BEGIN " + "RSA PRIVATE KEY-----\n"
|
|
PEM_FOOTER = "-----END " + "RSA PRIVATE KEY-----"
|
|
|
|
|
|
def test_truncated_rsa_pem_without_end_redacted():
|
|
blob = (
|
|
PEM_HEADER +
|
|
"MIIEowIBAAKCAQEA0Z3VS5JJcds3xfn/ygWyF6PZGFw7\n"
|
|
"ygWyF6PZGFw7morekeymaterialHERE"
|
|
)
|
|
text, hits = sanitize(f"key dump:\n{blob}\n")
|
|
assert "MIIEowIBAAKCAQEA" not in text
|
|
assert "[REDACTED_PRIVATE_KEY]" in text
|
|
assert any(h["category"] == "private_key" for h in hits)
|
|
|
|
|
|
def test_complete_pem_still_redacted():
|
|
blob = (
|
|
PEM_HEADER +
|
|
"MIIEowIBAAKCAQEA0Z3VS5JJcds3xfn/ygWyF6PZGFw7\n" +
|
|
PEM_FOOTER
|
|
)
|
|
text, hits = sanitize(blob)
|
|
assert "MIIEowIBAAKCAQEA" not in text
|
|
assert text.strip() == "[REDACTED_PRIVATE_KEY]"
|
|
assert any(h["category"] == "private_key" for h in hits)
|
|
|
|
|
|
def test_non_key_text_unchanged():
|
|
text, hits = sanitize("no secrets here, only BEGIN of a story")
|
|
assert text == "no secrets here, only BEGIN of a story"
|
|
assert hits == []
|