forked from cardosofelipe/pragma-stack
**Test Documentation Update:** Simplify test coverage description and clarify security-focused testing features, including CVE-2015-9235 prevention, session hijacking, and privilege escalation.
This commit is contained in:
@@ -86,10 +86,10 @@ alembic upgrade head
|
|||||||
|
|
||||||
#### Testing
|
#### Testing
|
||||||
|
|
||||||
**Test Coverage: 97%** (743 tests, all passing)
|
**Test Coverage: High (comprehensive test suite)**
|
||||||
- Comprehensive test suite with security-focused testing
|
- Security-focused testing with JWT algorithm attack prevention (CVE-2015-9235)
|
||||||
- Includes tests for JWT algorithm attacks (CVE-2015-9235), session hijacking, and privilege escalation
|
- Session hijacking and privilege escalation tests included
|
||||||
- 84 missing lines are justified (defensive code, error handlers, production-only code)
|
- Missing lines justified as defensive code, error handlers, and production-only code
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# Run all tests (uses pytest-xdist for parallel execution)
|
# Run all tests (uses pytest-xdist for parallel execution)
|
||||||
|
|||||||
Reference in New Issue
Block a user