From 45b705ba85c1c6243fc3790e0614654b98180ca8 Mon Sep 17 00:00:00 2001 From: CRT Date: Sun, 18 Oct 2026 01:46:36 +0800 Subject: [PATCH] tests: report fixtures use example.com subdomains and the zero uuid (the repo scrub flagged corp.invalid emails and a real-looking issuer id) --- tests/report.test.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/report.test.ts b/tests/report.test.ts index 70f8579..a98d9bc 100644 --- a/tests/report.test.ts +++ b/tests/report.test.ts @@ -9,7 +9,7 @@ import { shouldOpen } from '../cli/report'; const ROOT = join(import.meta.dir, '..'); const PEM = '-----BEGIN PRIVATE KEY-----\nMIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQgFIXTURE000000000000\n-----END PRIVATE KEY-----'; -const SECRETS = { keyId: 'K2X9Q7W4Z1', issuer: '6f1c2a3b-4d5e-4f60-8a9b-0c1d2e3f4a5b', demoUser: 'reviewer.fixture@corp.invalid', demoPass: 'Fixture-Pass-9931', contact: 'owner.fixture@corp.invalid' }; +const SECRETS = { keyId: 'K2X9Q7W4Z1', issuer: '00000000-0000-0000-0000-000000000000', demoUser: 'reviewer.fixture@mail.example.com', demoPass: 'Fixture-Pass-9931', contact: 'owner.fixture@mail.example.com' }; const fixture = () => buildReport({ app: { name: 'Fixture ', version: '1.2.0', build: '42' }, stores: ['apple', 'play'], storeRead: { apple: true, play: 'no Play service account' }, @@ -70,12 +70,12 @@ describe('report renderer', () => { }); test('maskSecrets: keys, tokens, emails; example.com and plain words kept', () => { - const m = maskSecrets(`${PEM} eyJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJmaXh0dXJlIn0.c2lnbmF0dXJlZml4dHVyZQ ${SECRETS.keyId} ${SECRETS.issuer} a@corp.invalid support@example.com ageRating NSPrivacyAccessedAPICategoryUserDefaults ITMS-91053`); + const m = maskSecrets(`${PEM} eyJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJmaXh0dXJlIn0.c2lnbmF0dXJlZml4dHVyZQ ${SECRETS.keyId} ${SECRETS.issuer} a@mail.example.com support@example.com ageRating NSPrivacyAccessedAPICategoryUserDefaults ITMS-91053`); expect(m).not.toContain('BEGIN PRIVATE KEY'); expect(m).not.toContain('eyJhbGci'); expect(m).not.toContain(SECRETS.keyId); expect(m).not.toContain(SECRETS.issuer); - expect(m).not.toContain('a@corp.invalid'); + expect(m).not.toContain('a@mail.example.com'); expect(m).toContain('support@example.com'); expect(m).toContain('NSPrivacyAccessedAPICategoryUserDefaults'); expect(m).toContain('ITMS-91053');