-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test: Add tests for masking of sensitive data #165
Conversation
@@ -7236,7 +7236,7 @@ exports[`record integration tests mutations should work when blocked class is un | |||
\\"attributes\\": { | |||
\\"class\\": \\"rr-block\\", | |||
\\"rr_width\\": \\"1904px\\", | |||
\\"rr_height\\": \\"21px\\" | |||
\\"rr_height\\": \\"21.5px\\" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is flakey :(
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yeah, sucks a lot 😬
<label> | ||
<input autocomplete="cc-number" value="initial" /> | ||
</label> | ||
<label> | ||
<input autocomplete="cc-exp" value="initial" /> | ||
</label> | ||
<label> | ||
<input autocomplete="cc-exp-month" value="initial" /> | ||
</label> | ||
<label> | ||
<input autocomplete="cc-exp-year" value="initial" /> | ||
</label> | ||
<label> | ||
<input autocomplete="cc-csc" value="initial" /> | ||
</label> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we add a test for dynamically inserted elements as well?
I'll add some in the follow up PR! |
This is on top of #165, actually fixing the behavior so that certain fields cannot be unmasked. This is a pretty straightforward fix, a bit "hacky" but should work well enough. Fixes getsentry/sentry-javascript#10258 --------- Co-authored-by: mydea <[email protected]>
This tests masking of initial & updated values for password & credit card fields. You can see that for now credit card data is not masked, which demonstrates the current behavior. In a future PR we can then verify that our fixed masking is working. ref getsentry/sentry-javascript#10258
This is on top of #165, actually fixing the behavior so that certain fields cannot be unmasked. This is a pretty straightforward fix, a bit "hacky" but should work well enough. Fixes getsentry/sentry-javascript#10258 --------- Co-authored-by: mydea <[email protected]>
This tests masking of initial & updated values for password & credit card fields.
You can see that for now credit card data is not masked, which demonstrates the current behavior.
In a future PR we can then verify that our fixed masking is working.
ref getsentry/sentry-javascript#10258