Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Tests for Obfuscation of Email and Phone in /profileDiff GET API #2206

Open
6 of 10 tasks
lakshayman opened this issue Oct 8, 2024 · 0 comments
Open
6 of 10 tasks

Comments

@lakshayman
Copy link
Contributor

lakshayman commented Oct 8, 2024

Issue Description

The /profileDiff GET API currently lacks tests to validate the obfuscation of email and phone fields. This omission can lead to potential issues where sensitive user data is returned in plain text, compromising user privacy.

Expected Behavior

The test file for the /profileDiff API should include tests that verify:

  • Email and phone fields are correctly obfuscated in the API response.

Current Behavior

There are no existing tests in the test file for the /profileDiff GET API related to the obfuscation of email and phone fields.

Screenshots

(No screenshots available as this is a backend issue)

Reproducibility

  • This issue is reproducible
  • This issue is not reproducible

Steps to Reproduce

  1. Review the test file for the /profileDiff GET API.
  2. Notice the absence of tests for email and phone obfuscation.

Severity/Priority

  • Critical
  • High
  • Medium
  • Low

Additional Information

Adding tests for the /profileDiff GET API is essential to ensure that the obfuscation of email and phone fields is consistently validated, thereby enhancing the overall security and privacy of user data.

Checklist

  • I have read and followed the project's code of conduct.
  • I have searched for similar issues before creating this one.
  • I have provided all the necessary information to understand and reproduce the issue.
  • I am willing to contribute to the resolution of this issue.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant