feat:日志敏感信息过滤

scripts/tests/test_generate_file_access_config.py

@@ -77,6 +77,26 @@ class SharedFileAccessConfigurationTest(unittest.TestCase):
         policy = json.loads((self.secret_dir / 'config.yml').read_text())['file-access']
         self.assertEqual(policy['mode'], 'observe')
         self.assertTrue(policy['block-browser-navigation'])
+        self.assertEqual(policy['upload']['ttl-seconds'], 300)
+        self.assertEqual(policy['upload']['max-file-bytes'], 200 * 1024 * 1024)
+        self.assertTrue({'jpg', 'pdf', 'apk', 'docx', 'xlsx', 'zip', 'mp4', 'txt'}.issubset(policy['upload']['allowed-extensions']))
+        self.assertEqual(policy['upload']['internal-extensions'], ['log', 'gz'])
+
+    def test_existing_custom_upload_policy_is_preserved_without_changing_keys(self):
+        self.run_script()
+        registry = (self.secret_dir / 'keys.json').read_bytes()
+        path = self.secret_dir / 'config.yml'
+        config = json.loads(path.read_text())
+        config['file-access']['upload'] = {'ttl-seconds': 120, 'max-file-bytes': 1024,
+                                          'allowed-extensions': ['png', 'pdf']}
+        path.write_text(json.dumps(config))
+        self.run_script()
+        policy = json.loads(path.read_text())['file-access']['upload']
+        self.assertEqual(policy['ttl-seconds'], 120)
+        self.assertEqual(policy['max-file-bytes'], 1024)
+        self.assertEqual(policy['allowed-extensions'], ['png', 'pdf'])
+        self.assertEqual(policy['internal-extensions'], ['log', 'gz'])
+        self.assertEqual((self.secret_dir / 'keys.json').read_bytes(), registry)
 
     def test_invalid_existing_keys_are_never_silently_replaced(self):
         original = {app: 'not-a-valid-base64-key' for app in APPS}