WangShen007
20fef2b9f3
One word everywhere: ReplyPier in UI copy, package and image names, the replypier.site domains (app/api/docs/help), REPLYPIER_* settings and the --rp-* design tokens. - public widget API is window.ReplyPier with replypierId / replypierBaseUrl / replypierConfig / replypierToken, loader at webclient/replypier.min.js; both bundles rebuilt from source - NOTICE, llms.txt, CONTRIBUTING, HELP_CENTER_INFRA and the demo runtime config rewritten; the demo config ships no third-party keys - migration adds the ReplyPier managed model value to the AI model enum - local compose project, database, role, volume and Docker network carry the same name
95 lines
3.7 KiB
Python
95 lines
3.7 KiB
Python
"""
|
|
Copyright 2024-2026 ReplyPier
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
Cross-customer leakage guards: the investigator reads other customers' tickets
|
|
and unscoped database rows, then writes a summary delivered to one customer.
|
|
"""
|
|
|
|
from app.services.ticket_privacy import (
|
|
THIRD_PARTY_MARKER,
|
|
redact_reference_text,
|
|
scrub_outbound,
|
|
)
|
|
|
|
OWNER_EMAIL = "arun@replypier.site"
|
|
OWNER_PHONE = "+441234567890"
|
|
|
|
|
|
class TestScrubOutbound:
|
|
def test_other_customers_email_is_redacted(self):
|
|
text = "We saw the same fault on the account for bob@othercorp.com."
|
|
out = scrub_outbound(text, (OWNER_EMAIL, OWNER_PHONE))
|
|
assert "bob@othercorp.com" not in out
|
|
assert THIRD_PARTY_MARKER in out
|
|
|
|
def test_recipients_own_email_survives(self):
|
|
# Blanking the recipient's own address makes legitimate summaries read
|
|
# as broken, and telling someone their own address leaks nothing.
|
|
text = f"We updated the profile picture on {OWNER_EMAIL}."
|
|
assert scrub_outbound(text, (OWNER_EMAIL,)) == text
|
|
|
|
def test_own_email_matched_case_insensitively(self):
|
|
text = "Your account Arun@ReplyPier.Site is fixed."
|
|
assert scrub_outbound(text, (OWNER_EMAIL,)) == text
|
|
|
|
def test_own_phone_survives_reformatting(self):
|
|
text = "We called you on 441234567890."
|
|
assert scrub_outbound(text, (OWNER_PHONE,)) == text
|
|
|
|
def test_third_party_phone_redacted(self):
|
|
text = "The other merchant on 555-867-5309 hit this too."
|
|
out = scrub_outbound(text, (OWNER_EMAIL, OWNER_PHONE))
|
|
assert "555-867-5309" not in out
|
|
|
|
def test_card_and_ssn_always_redacted_even_for_owner(self):
|
|
# No support summary has a reason to restate these, whoever owns them.
|
|
text = "Card 4111 1111 1111 1111 and SSN 123-45-6789."
|
|
out = scrub_outbound(text, (OWNER_EMAIL, "4111 1111 1111 1111"))
|
|
assert "4111" not in out
|
|
assert "123-45-6789" not in out
|
|
|
|
def test_short_numbers_do_not_whitelist_themselves(self):
|
|
# An order count must not be treated as the owner's phone and thereby
|
|
# whitelist an unrelated number.
|
|
out = scrub_outbound("Contact 555-867-5309 about it.", ("42",))
|
|
assert "555-867-5309" not in out
|
|
|
|
def test_clean_message_untouched(self):
|
|
text = "We found a missing configuration value and corrected it."
|
|
assert scrub_outbound(text, (OWNER_EMAIL,)) == text
|
|
|
|
def test_handles_empty(self):
|
|
assert scrub_outbound(None, (OWNER_EMAIL,)) is None
|
|
assert scrub_outbound("", (OWNER_EMAIL,)) == ""
|
|
|
|
def test_no_owner_identifiers_redacts_everything(self):
|
|
out = scrub_outbound("Reach bob@othercorp.com", ())
|
|
assert "bob@othercorp.com" not in out
|
|
|
|
|
|
class TestRedactReferenceText:
|
|
def test_strips_identifiers_from_another_customers_ticket(self):
|
|
out = redact_reference_text(
|
|
"TKT-3 [resolved] Payout failed for bob@othercorp.com — resolution: retried"
|
|
)
|
|
assert "bob@othercorp.com" not in out
|
|
# The signal — what broke and how it was fixed — must survive.
|
|
assert "Payout failed" in out
|
|
assert "retried" in out
|
|
|
|
def test_handles_empty(self):
|
|
assert redact_reference_text(None) is None
|
|
assert redact_reference_text("") == ""
|