TheKevJames / coveralls-python / 29750176194

94%

master: 96%

Pull #753

github

fix(api): stop leaking client settings into the coveralls.io payload

create_data() dumped the entire self.config dict into the submitted JSON, so
client-only settings (base_dir, src_dir, config_file, and the timeout family)
were sent to coveralls.io alongside every source file. Restrict the payload to
an explicit PAYLOAD_FIELDS allowlist of the fields the API actually consumes.

130 of 140 branches covered (92.86%)

Branch coverage included in aggregate %.

5 of 5 new or added lines in 2 files covered. (100.0%)

431 of 458 relevant lines covered (94.1%)

4.71 hits per line