Permit private IPv6 while redacting responses

This commit is contained in:
ms2k 2026-07-17 03:45:13 +09:00
commit 5cbb0364d2

View file

@ -251,6 +251,34 @@ fn request_debug_redacts_url_and_credential_values() {
assert!(!debug.contains("synthetic-api-key"));
}
#[tokio::test]
async fn response_debug_redacts_url_and_response_headers() {
let (port, _, server) = serve_http(1, |_| {
response(
"200 OK",
&[("Set-Cookie", "session=synthetic-secret")],
"ok",
)
})
.await;
let resolver = ScriptedResolver::new([("source.test", vec![vec![ip("127.0.0.1")]])]);
let client = OutboundClient::builder(resolver, local_policy(port, 5)).build();
let result = client
.execute(
OutboundRequest::get(&format!(
"http://source.test:{port}/sensitive?token=synthetic"
))
.expect("request"),
)
.await
.expect("response");
let debug = format!("{result:?}");
assert!(debug.contains("200"));
assert!(!debug.contains("sensitive"));
assert!(!debug.contains("synthetic-secret"));
server.await.expect("server");
}
#[tokio::test]
async fn denied_redirect_is_rejected_before_dial() {
let (port, _, server) = serve_http(1, |request| {