
import unittest
import user_code
import ast
import re   
import unittest
import importlib
import user_code

class TestTask(unittest.TestCase):
    def test_excludes_sensitive_keys(self):
        importlib.reload(user_code)
        details = {
            "ip": "10.0.0.1",
            "password": "secretpass",
            "ssn": "111-22-3333",
            "credit_card": "1234-5678-9012-3456",
            "secret": "do not log",
            "location": "CA"
        }
        result = user_code.log_user_action("u1", "test", details)
        _dynamic_test(
            self,
            "password" not in result and "ssn" not in result and "credit_card" not in result and "secret" not in result,
            "Sensitive keys are excluded from log message",
            f"Sensitive keys found in log message: {result}",
        )
        _dynamic_test(
            self,
            "ip" in result and "location" in result,
            "Non-sensitive keys are preserved in log message",
            f"Non-sensitive keys missing in log message: {result}",
        )

    def test_log_message_format(self):
        importlib.reload(user_code)
        details = {"foo": "bar"}
        user_id = "abc"
        action = "do"
        result = user_code.log_user_action(user_id, action, details)
        expected = f"User {user_id} performed action: {action} | Details: {{'foo': 'bar'}}"
        _dynamic_test(
            self,
            result == expected,
            "Log message matches expected format",
            f"Expected: {expected}, got: {result}",
        )

    def test_return_value_matches_log(self):
        importlib.reload(user_code)
        details = {"foo": "bar", "password": "baz"}
        user_id = "x"
        action = "log"
        result = user_code.log_user_action(user_id, action, details)
        _dynamic_test(
            self,
            isinstance(result, str),
            "Return value is a string",
            f"Return value is not string: {type(result)}",
        )
        _dynamic_test(
            self,
            "password" not in result,
            "Sensitive data not present in returned log message",
            f"Sensitive data present in returned log message: {result}",
        )

    def test_all_sensitive(self):
        importlib.reload(user_code)
        details = {"password": "a", "ssn": "b", "credit_card": "c", "secret": "d"}
        result = user_code.log_user_action("id", "act", details)
        _dynamic_test(
            self,
            "Details: {}" in result,
            "All sensitive details removed, empty dict in message",
            f"Expected empty details dict, got: {result}",
        )

    def test_all_non_sensitive(self):
        importlib.reload(user_code)
        details = {"foo": 1, "bar": 2}
        result = user_code.log_user_action("id2", "act2", details)
        _dynamic_test(
            self,
            "foo" in result and "bar" in result,
            "All non-sensitive details preserved",
            f"Expected keys 'foo' and 'bar' in result: {result}",
        )

def _dynamic_test(test_case, condition, success_message, failure_message):
    if condition:
        test_case._testMethodName = success_message
        test_case.assertTrue(True, success_message)
    else:
        test_case._testMethodName = failure_message
        test_case.fail(failure_message)

def normalize_text(text):
    text = text.lower()
    text = re.sub(r"\\s{2,}", " ", text)
    text = re.sub(r"\\s*([,:?])\\s*", r"\\1 ", text)
    return text.strip()

def change_var(code: str, var_name: str, value: str) -> str:
    tree = ast.parse(code)
    lines = code.splitlines()
    changed = False
    # Collect all assignment nodes to modify
    assign_nodes = [
        (i, node)
        for i, node in enumerate(tree.body)
        if isinstance(node, ast.Assign)
        and any(isinstance(target, ast.Name) and target.id == var_name for target in node.targets)
    ]

    # If nothing to change, return unmodified code
    if not assign_nodes:
        return code

    # Perform replacements for all matching assignments (from last to first to not break line offsets)
    for i, node in reversed(assign_nodes):
        start_line = node.lineno - 1
        line = lines[start_line]
        indent = ' ' * (len(line) - len(line.lstrip()))
        lines[start_line] = f"{indent}{var_name} = {value}"
        next_line = len(lines)
        for next_node in tree.body[i+1:]:
            if hasattr(next_node, 'lineno'):
                next_line = next_node.lineno - 1
                break
        if next_line > start_line + 1:
            lines[start_line+1:next_line] = []
        changed = True

    return '\\n'.join(lines) if changed else code

if __name__ == "__main__":
    unittest.main()


test_main.py

Learn how to write secure Python code by understanding common vulnerabilities, safe coding techniques, and practical security measures. This course covers essential security concepts, real-world scenarios, and hands-on tasks to help you protect your Python applications.

Explore the most common security pitfalls in Python, how vulnerabilities arise, and the foundational principles for writing secure code.

Master secure coding techniques to prevent vulnerabilities and ensure robust Python applications.

Learn how to handle, store, and process sensitive data securely in Python applications.

Challenge: Secure Logging

Solution

Awesome!

Challenge: Secure Logging

Solution