fix(tess): harden redacted stream boundaries

This commit is contained in:
Jarvis
2026-07-12 19:39:37 -05:00
parent 70851d9474
commit fdd58a353b
4 changed files with 104 additions and 2 deletions

View File

@@ -11,4 +11,15 @@ describe('redactSensitiveContent', (): void => {
expect(result.content).not.toContain('+1 555 555 1212');
expect(result.classifications).toEqual(['secret', 'pii']);
});
it('redacts common provider credential formats', (): void => {
const result = redactSensitiveContent(
'Authorization: Bearer canary.bearer.token jwt eyJcanary.eyJpayload.eyJsignature aws AKIACANARY1234567890',
);
expect(result.content).not.toContain('canary.bearer.token');
expect(result.content).not.toContain('eyJcanary.eyJpayload.eyJsignature');
expect(result.content).not.toContain('AKIACANARY1234567890');
expect(result.classifications).toEqual(['secret']);
});
});