hkuds--vibe-trading
wehub-resource-sync
36 行
1.2 KiB
Python
36 行
1.2 KiB
Python
"""G1 evidence: anchored redaction — no over-redaction, idempotent, None-safe."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
|
|
from src.tools.redaction import _internal_roots, redact_internal_paths
|
|
|
|
|
|
def test_none_and_empty_and_nonstr_safe():
|
|
assert redact_internal_paths(None) == ""
|
|
assert redact_internal_paths("") == ""
|
|
assert redact_internal_paths(42) == "42"
|
|
|
|
|
|
def test_internal_leak_is_redacted_but_tail_kept():
|
|
leak = str(Path.cwd() / "agent" / "runs" / "RUN42" / "run.json")
|
|
out = redact_internal_paths(leak)
|
|
assert "<redacted>" in out
|
|
assert str(Path.cwd()) not in out
|
|
assert "RUN42" in out and "run.json" in out
|
|
|
|
|
|
def test_no_over_redaction_of_external_or_caller_paths():
|
|
roots = _internal_roots()
|
|
for keep in ("/etc/passwd", "/api/v1/orders", "../../etc/shadow", "D:\\external\\report.csv"):
|
|
assert not any(rt in keep for rt in roots)
|
|
assert redact_internal_paths(f"err: {keep}") == f"err: {keep}"
|
|
|
|
|
|
def test_idempotent():
|
|
leak = str(Path.home() / "agent" / "x" / "run.json")
|
|
once = redact_internal_paths(leak)
|
|
assert redact_internal_paths(once) == once
|
|
assert "<redacted>" in once
|