mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-09-26 01:34:05 +00:00
Vinícius Ferrão
fca07665fe
Run redact_password rather than inspecting its source, so that a secret which survives is a failure here rather than something the shape of the code hides. Each supported way of writing an assignment is exercised, including the table qualified form and spaces around the equals sign, together with the positional flag that the per-command table handles. The expected set is derived from Schema.pm rather than repeated, so an attribute added there with a secret column fails this test instead of quietly reaching the logs, and the test bails if that mapping cannot be parsed so it cannot pass vacuously. Detail that is not secret is asserted to survive, since redacting it would cost the log its usefulness without protecting anything.