CRT/storebound
1
0
Fork 0
Code Issues Pull requests Releases 1 Packages 1 Activity Actions

tests: report fixtures use example.com subdomains and the zero uuid (the repo scrub flagged corp.invalid emails and a real-looking issuer id)

Browse source
This commit is contained in:
CRTkafa 2026-10-18 01:46:36 +08:00
parent 9bfc107415
commit 45b705ba85
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tests/report.test.ts
View file

@ -9,7 +9,7 @@ import { shouldOpen } from '../cli/report';
const ROOT = join(import.meta.dir, '..');
const PEM = '-----BEGIN PRIVATE KEY-----\nMIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQgFIXTURE000000000000\n-----END PRIVATE KEY-----';
const SECRETS = { keyId: 'K2X9Q7W4Z1', issuer: '6f1c2a3b-4d5e-4f60-8a9b-0c1d2e3f4a5b', demoUser: 'reviewer.fixture@corp.invalid', demoPass: 'Fixture-Pass-9931', contact: 'owner.fixture@corp.invalid' };
const SECRETS = { keyId: 'K2X9Q7W4Z1', issuer: '00000000-0000-0000-0000-000000000000', demoUser: 'reviewer.fixture@mail.example.com', demoPass: 'Fixture-Pass-9931', contact: 'owner.fixture@mail.example.com' };
const fixture = () => buildReport({
app: { name: 'Fixture <App>', version: '1.2.0', build: '42' }, stores: ['apple', 'play'], storeRead: { apple: true, play: 'no Play service account' },
@ -70,12 +70,12 @@ describe('report renderer', () => {
});
test('maskSecrets: keys, tokens, emails; example.com and plain words kept', () => {
const m = maskSecrets(`${PEM} eyJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJmaXh0dXJlIn0.c2lnbmF0dXJlZml4dHVyZQ ${SECRETS.keyId} ${SECRETS.issuer} a@corp.invalid support@example.com ageRating NSPrivacyAccessedAPICategoryUserDefaults ITMS-91053`);
const m = maskSecrets(`${PEM} eyJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJmaXh0dXJlIn0.c2lnbmF0dXJlZml4dHVyZQ ${SECRETS.keyId} ${SECRETS.issuer} a@mail.example.com support@example.com ageRating NSPrivacyAccessedAPICategoryUserDefaults ITMS-91053`);
expect(m).not.toContain('BEGIN PRIVATE KEY');
expect(m).not.toContain('eyJhbGci');
expect(m).not.toContain(SECRETS.keyId);
expect(m).not.toContain(SECRETS.issuer);
expect(m).not.toContain('a@corp.invalid');
expect(m).not.toContain('a@mail.example.com');
expect(m).toContain('support@example.com');
expect(m).toContain('NSPrivacyAccessedAPICategoryUserDefaults');
expect(m).toContain('ITMS-91053');