This is an automated email from the ASF dual-hosted git repository.
wenjin272 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/flink-agents.git
The following commit(s) were added to refs/heads/main by this push:
new 80a5b9ac8 [python] Use a reserved host in the redirect user-info test
fixture (#1115)
80a5b9ac8 is described below
commit 80a5b9ac8e91e624b9d1c622035c148a97b40f16
Author: Alan Z. <[email protected]>
AuthorDate: Mon Sep 14 02:52:19 2026 -0700
[python] Use a reserved host in the redirect user-info test fixture (#1115)
Generated-by: Claude Code 2.1.265 (Claude Opus 5)
---
python/flink_agents/runtime/skill/tests/test_materialize.py | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/python/flink_agents/runtime/skill/tests/test_materialize.py
b/python/flink_agents/runtime/skill/tests/test_materialize.py
index f1b4182ce..ad8f6f91f 100644
--- a/python/flink_agents/runtime/skill/tests/test_materialize.py
+++ b/python/flink_agents/runtime/skill/tests/test_materialize.py
@@ -230,9 +230,11 @@ class TestDownloadToTempfile:
self, static_server: "tuple[str, type[_StaticHandler]]"
) -> None:
base_url, handler = static_server
- target = base_url.removeprefix("http://";)
+ # A credential on a live host is indistinguishable from a real leak, so
+ # use the reserved example.com (RFC 2606). As with the cross-protocol
+ # case, the target is rejected before the redirect is followed.
handler.redirect_location = (
- f"http://user:password@{target}/skills.zip?token=top-secret";
+ "http://user:[email protected]/skills.zip?token=top-secret";
)
with pytest.raises(ValueError, match="must not include user info") as
exc_info:
