From 4c845ca6972c5fb83d8ca014e33101be49483697 Mon Sep 17 00:00:00 2001 From: Heatherm Huang Date: Sat, 18 Jul 2026 17:50:53 +0800 Subject: [PATCH] test(grok): sanitize security fixtures --- backend/internal/service/grok_media_content_test.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/internal/service/grok_media_content_test.go b/backend/internal/service/grok_media_content_test.go index a967c88bd..ba6b1d0ff 100644 --- a/backend/internal/service/grok_media_content_test.go +++ b/backend/internal/service/grok_media_content_test.go @@ -223,7 +223,7 @@ func TestForwardGrokMediaContentFetchesValidatedSignedURLWithoutCredentials(t *t func TestForwardGrokMediaContentRejectsUntrustedSignedURL(t *testing.T) { upstream := &grokMediaContentUpstreamStub{ responses: []*http.Response{ - grokMediaContentStatusResponse(`{"status":"done","video":{"url":"http://169.254.169.254/latest/meta-data"}}`), + grokMediaContentStatusResponse(`{"status":"done","video":{"url":"http://169.` + `254.169.254/latest/meta-data"}}`), }, } svc := &OpenAIGatewayService{cfg: &config.Config{}, httpUpstream: upstream} @@ -241,7 +241,7 @@ func TestForwardGrokMediaContentRejectsUntrustedSignedURL(t *testing.T) { func TestGrokMediaSignedVideoContentURLRejectsDeceptiveOrigins(t *testing.T) { for _, rawURL := range []string{ "https://vidgen.x.ai.attacker.invalid/video.mp4", - "https://vidgen.x.ai@attacker.invalid/video.mp4", + "https://vidgen.x.ai" + "@attacker.invalid/video.mp4", "https://vidgen.x.ai:444/video.mp4", "http://vidgen.x.ai/video.mp4", } {