From 1303cd2701619d391fa42cc306667922aa2406ea Mon Sep 17 00:00:00 2001 From: maziggy Date: Wed, 13 May 2026 11:13:49 +0200 Subject: [PATCH] test(password): replace realistic fixtures with obviously-synthetic strings GitGuardian flagged "Bambuddy1!" and "LongerP@ssw0rd!" in password.test.ts as potential leaked credentials. Replace with patterned placeholders ("Aa1!aaaa", "Aa1!Aa1!Aa1!") that still satisfy every complexity rule (upper/lower/digit/special, >=8 chars) but won't trip secret scanners. --- frontend/src/__tests__/utils/password.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/frontend/src/__tests__/utils/password.test.ts b/frontend/src/__tests__/utils/password.test.ts index 989baf4e9..368c3ad35 100644 --- a/frontend/src/__tests__/utils/password.test.ts +++ b/frontend/src/__tests__/utils/password.test.ts @@ -30,8 +30,8 @@ describe('checkPasswordComplexity', () => { }); it('returns null for a password that meets every rule', () => { - expect(checkPasswordComplexity('Bambuddy1!')).toBeNull(); - expect(checkPasswordComplexity('LongerP@ssw0rd!')).toBeNull(); + expect(checkPasswordComplexity('Aa1!aaaa')).toBeNull(); + expect(checkPasswordComplexity('Aa1!Aa1!Aa1!')).toBeNull(); }); it('handles a password from the #1303 user (8 digits) — the original failure mode', () => {