adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-10-07 16:08:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
procurement-ingest/tests
History
Adam Moussa d48f06e20e
test: lock attribute-context quote escaping in web_ui hostile-field test 
The escaping regression lock asserted only the element-context vector
(raw <script> absent, &lt;script&gt; present) while its docstring claimed
quotes were covered -- the payload's " and ' were never asserted on, so
a quote-escaping regression on the onclick row-link sink (attribute
breakout -> event-handler injection) would have passed green.
/sh-security-review finding WC-01 (confirmed medium, test-integrity).

Add assertions that the onclick sink's JSON string renders its opening
quote as &quot; (raw " after window.location= fails), that the
payload's quote characters appear only entity-escaped, and that the
raw payload never appears anywhere in the body. Mutation-verified: the
test now fails when the sink's quote-escaping is dropped.
2026-07-20 15:44:15 -04:00
..
support test: consolidate test roots — one repo-root loader, shared support package, missing-scenario suites, enforced ruff/coverage floor (refactor phase 8) 2026-07-20 15:44:15 -04:00
requirements.txt test: consolidate test roots — one repo-root loader, shared support package, missing-scenario suites, enforced ruff/coverage floor (refactor phase 8) 2026-07-20 15:44:15 -04:00
test_bundle_consistency.py feat: decompose email-processor handlers into flat siblings + lazy boto3 clients (refactor phase 5) (#113) 2026-07-20 15:34:53 -04:00
test_handler_auth_seam.py test: consolidate test roots — one repo-root loader, shared support package, missing-scenario suites, enforced ruff/coverage floor (refactor phase 8) 2026-07-20 15:44:15 -04:00
test_parse_raw_email.py Add pytest suite and enable tests in CI (#95) 2026-07-15 19:06:20 -04:00
test_reprocess_contract.py Ops/recovery tooling + dependency hygiene (refactor phase 7) (#110) 2026-07-20 12:53:34 -04:00
test_ses_auth.py fix(ses_auth): harden comment stripping and alarm evaluation window (#103) 2026-07-16 19:00:40 +00:00
test_web_ui_auth.py test: consolidate test roots — one repo-root loader, shared support package, missing-scenario suites, enforced ruff/coverage floor (refactor phase 8) 2026-07-20 15:44:15 -04:00
test_web_ui_handlers.py test: lock attribute-context quote escaping in web_ui hostile-field test 2026-07-20 15:44:15 -04:00