Permit private IPv6 while redacting responses
This commit is contained in:
parent
7bd5316b1b
commit
5cbb0364d2
1 changed files with 47 additions and 3 deletions
|
|
@ -251,6 +251,34 @@ fn request_debug_redacts_url_and_credential_values() {
|
|||
assert!(!debug.contains("synthetic-api-key"));
|
||||
}
|
||||
|
||||
#[tokio::test]
|
||||
async fn response_debug_redacts_url_and_response_headers() {
|
||||
let (port, _, server) = serve_http(1, |_| {
|
||||
response(
|
||||
"200 OK",
|
||||
&[("Set-Cookie", "session=synthetic-secret")],
|
||||
"ok",
|
||||
)
|
||||
})
|
||||
.await;
|
||||
let resolver = ScriptedResolver::new([("source.test", vec![vec![ip("127.0.0.1")]])]);
|
||||
let client = OutboundClient::builder(resolver, local_policy(port, 5)).build();
|
||||
let result = client
|
||||
.execute(
|
||||
OutboundRequest::get(&format!(
|
||||
"http://source.test:{port}/sensitive?token=synthetic"
|
||||
))
|
||||
.expect("request"),
|
||||
)
|
||||
.await
|
||||
.expect("response");
|
||||
let debug = format!("{result:?}");
|
||||
assert!(debug.contains("200"));
|
||||
assert!(!debug.contains("sensitive"));
|
||||
assert!(!debug.contains("synthetic-secret"));
|
||||
server.await.expect("server");
|
||||
}
|
||||
|
||||
#[tokio::test]
|
||||
async fn denied_redirect_is_rejected_before_dial() {
|
||||
let (port, _, server) = serve_http(1, |request| {
|
||||
|
|
|
|||
Loading…
Reference in a new issue