urwid / urwid / 37017531985

90%

push

github

Harden Edit against text leaks and control input (#1387)

A masked Edit exposed its text outside the rendered canvas, and
the input filters let through characters that break layout or
conversion:

- Edit repr shows the masked text and the mask instead of the text.
- insert_text_result keeps the text out of its ValueError when masked.
- valid_char refuses Unicode control characters (Cc) and DEL bytes,
  which render as "?" but count as zero columns.
- IntEdit refuses a digit that would take the text past
  sys.get_int_max_str_digits(), so value() can convert what the user
  typed.

4611 of 5546 branches covered (83.14%)

Branch coverage included in aggregate %.

11 of 12 new or added lines in 1 file covered. (91.67%)

11568 of 13200 relevant lines covered (87.64%)

9.79 hits per line