测试与质量
pytest-fixtures-security
更新于 2026-10-23
pytest · 安全规则
Security rules for pytest: boundary validation, server-side authorisation and zero secret leakage.
- 技术栈
- pytest
- 主题
- 安全
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Validate and normalise every input at the boundary it enters the system
- ✓ Authorise on the server against the authenticated principal, never on client claims
- ✓ Keep secrets out of repositories, logs and error messages
✕ 常见反模式
- ✕ Trusting headers or parameters that a client can set freely
- ✕ Disabling TLS verification or CSRF protection to unblock a test
- ✕ Wide-scope tokens with no expiry
◎ 交付前验证
- ◎ Suite passes in random order and with concurrency enabled
- ◎ Coverage on the changed module did not drop
- ◎ Flaky tests reported rather than retried silently
同分类条目
27 篇测试与质量
Vitest 工程规则
Vitest rules: behaviour-first assertions and deterministic concurrency
测试与质量
Jest 工程规则
Jest rules: boundary mocks, isolated modules and no shared global state
测试与质量
Playwright 工程规则
Playwright rules: role-based selectors and network idempotency
测试与质量
Cypress 工程规则
Cypress rules: spec independence and explicit API seeding
测试与质量
Go Testing 工程规则
Go testing rules: table-driven cases and race-detector runs
测试与质量
pytest 工程规则
pytest rules: fixture scoping and no inter-test ordering assumptions