Build latest book artifacts / build (push) Canceled after 0s
dependency resolution / resolve (3.11) (push) Canceled after 0s
dependency resolution / resolve (3.13) (push) Canceled after 0s
deploy-pages / build (push) Canceled after 0s
deploy-pages / deploy (push) Canceled after 0s
i18n consistency check / check (push) Canceled after 0s
provider adoption tests / test (chapter2/context-compression) (push) Canceled after 0s
provider adoption tests / test (chapter2/prompt-injection) (push) Canceled after 0s
provider adoption tests / test (chapter2/system-hint) (push) Canceled after 0s
provider adoption tests / test (chapter3/log-sanitization) (push) Canceled after 0s
web-search-agent tests / test (push) Canceled after 0s
web-search-agent tests / agentbook (push) Canceled after 0s
23 lines
835 B
Python
23 lines
835 B
Python
"""Regression: URL credentials with an empty username must be redacted."""
|
|
from regex_sanitizer import sanitize
|
|
|
|
|
|
def test_redis_empty_user_password_redacted():
|
|
text, hits = sanitize("redis://:secretpass@10.0.0.1:6379/0")
|
|
assert "secretpass" not in text
|
|
assert "[REDACTED_URL_CRED]" in text
|
|
assert any(h["category"] == "url_credential" for h in hits)
|
|
|
|
|
|
def test_postgres_empty_user_password_redacted():
|
|
text, hits = sanitize("DATABASE_URL=postgres://:hunter2@localhost:5432/db")
|
|
assert "hunter2" not in text
|
|
assert "[REDACTED_URL_CRED]" in text
|
|
assert any(h["category"] == "url_credential" for h in hits)
|
|
|
|
|
|
def test_named_user_password_still_redacted():
|
|
text, hits = sanitize("redis://default:secretpass@10.0.0.1:6379/0")
|
|
assert "secretpass" not in text
|
|
assert "[REDACTED_URL_CRED]" in text
|