maziggy d45bcb87ed test(users/groups): hoist privilege-escalation test passwords to a fixture constant ...

GitGuardian flagged the seven hard-coded passwords used by the
  privilege-escalation regression suite as potential secrets. They are
  test-only credentials whose value is irrelevant — the suite asserts
  the admin authorization gate, not password handling — but the pattern
  matches the high-confidence detector.

  Replace each call-site literal with a single _FIXTURE_PW module
  constant, built from string concatenation so it doesn't hash to a
  recognisable token, with a comment explaining the purpose and the
  complexity rule it satisfies. No behavioural change; all 11 tests
  still pass.

2026-06-12 13:22:45 +02:00

..

app

Security hardening (maziggy/bambuddy-security #1)

2026-06-12 11:11:38 +02:00

tests

test(users/groups): hoist privilege-escalation test passwords to a fixture constant

2026-06-12 13:22:45 +02:00

__init__.py

…