fanhuadesenlinnn/daily_stock_analysis
1
0
Fork 0
mirror of https://github.com/ZhuLinsen/daily_stock_analysis synced 2026-09-20 10:53:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: redact quoted YAML explicit keys

Browse Source
This commit is contained in:
zhulinsen
2026-07-26 22:49:23 +08:00
parent 7d533a305b
commit 27a013fbfb
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/llm/local_cli_backend.py
View File

@@ -331,7 +331,9 @@ def _diagnostic_yaml_explicit_key_pattern() -> re.Pattern[str]:
^
(?P<indent>[ ]*)
\?[ \t]+
(?P<name_quote>['"]?)
(?P<name>{_diagnostic_field_name_pattern()})
(?P=name_quote)
[ \t]*(?:\#.*)?
\r?\n?
$

13
tests/test_local_cli_backend.py
View File

@@ -1728,6 +1728,16 @@ def test_diagnostics_preserves_non_sensitive_spaced_key_labels() -> None:
("tiny-secret",),
"session_id: yaml123",
),
(
"? 'api_key'\n: single-quoted-secret\nsession_id: yaml123\n",
("single-quoted-secret",),
"session_id: yaml123",
),
(
'? "api_key"\n: double-quoted-secret\nsession_id: yaml123\n',
("double-quoted-secret",),
"session_id: yaml123",
),
(
"? credentials\n:\n- tiny-one\n- tiny-two\nsession_id: yaml123\n",
("tiny-one", "tiny-two"),
@@ -2366,6 +2376,7 @@ print('{"AIHUBMIX_KEY":"json-short","session_id":"json123"}', file=sys.stderr)
print('{"set-cookie":"session=cookie-header","session_id":"header123"}', file=sys.stderr)
print('{"api\\\\u005fkey":"escaped-json","session_id":"escaped123"}', file=sys.stderr)
print("? api_key\\n: explicit-secret\\nsession_id: explicit123", file=sys.stderr)
print("? 'api_key'\\n: quoted-explicit-secret\\nsession_id: quoted-explicit123", file=sys.stderr)
print("OPENAI_API_KEY='x'\\\"'\\\"'shell-quoted' session_id=quoted123", file=sys.stderr)
print("OPENAI_API_KEY+=appended-secret session_id=append123", file=sys.stderr)
print("{'api_key': 'single-quoted', 'session_id': 'single123'}", file=sys.stderr)
@@ -2399,6 +2410,7 @@ raise SystemExit(2)
"cookie-header",
"escaped-json",
"explicit-secret",
"quoted-explicit-secret",
"shell-quoted",
"appended-secret",
"single-quoted",
@@ -2420,6 +2432,7 @@ raise SystemExit(2)
assert '{"set-cookie":"<redacted>","session_id":"header123"}' in stderr_preview
assert r'{"api\u005fkey":"<redacted>","session_id":"escaped123"}' in stderr_preview
assert "? api_key\n: <redacted>\nsession_id: explicit123" in stderr_preview
assert "? 'api_key'\n: <redacted>\nsession_id: quoted-explicit123" in stderr_preview
assert "OPENAI_API_KEY='<redacted>' session_id=quoted123" in stderr_preview
assert "OPENAI_API_KEY+=<redacted> session_id=append123" in stderr_preview
assert "{'api_key': '<redacted>', 'session_id': 'single123'}" in stderr_preview