From e3b764812de506460607d0b5d31973a0de20b4cb Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 04:16:15 +0300 Subject: [PATCH 1/7] Create test_poc.py --- python/tests/unit/test_poc.py | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 python/tests/unit/test_poc.py diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py new file mode 100644 index 000000000000..7cb0d370723d --- /dev/null +++ b/python/tests/unit/test_poc.py @@ -0,0 +1,24 @@ +import pytest + +# Neutral Markdown Payload for Demonstration +# We use microsoft.com to demonstrate the potential for phishing/social engineering +# without using malicious external links. +PAYLOAD = """ +# ⚠️ SECURITY NOTICE ⚠️ +Action Required: To maintain CI/CD integrity, please re-authenticate your session. +[Click here to verify your identity via Microsoft SSO](https://www.microsoft.com) +
+--- +*Automated security verification provided by Semantic Kernel CI/CD Pipeline* +""" + +class TestCoverage__INJECTION_POINT: + """ + The class name or test name is injected into the 'classname' attribute + of the generated pytest.xml file. + """ + @pytest.mark.parametrize("payload", [PAYLOAD]) + def test_coverage_report_injection(self, payload): + # This test always passes to ensure the workflow proceeds to the + # 'success' condition required by the consumer workflow. + assert True From 3a2db1fe132f0c7aec4d13d8a38eeb26150e165b Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 04:53:29 +0300 Subject: [PATCH 2/7] Update test_poc.py --- python/tests/unit/test_poc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 7cb0d370723d..53d878ef0190 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -8,7 +8,7 @@ Action Required: To maintain CI/CD integrity, please re-authenticate your session. [Click here to verify your identity via Microsoft SSO](https://www.microsoft.com)
---- +--- *Automated security verification provided by Semantic Kernel CI/CD Pipeline* """ From f3d9f71ea3a2f89d5c4d1b820daa4cd4875c4cdb Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 05:08:22 +0300 Subject: [PATCH 3/7] Update test_poc.py --- python/tests/unit/test_poc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 53d878ef0190..335015677157 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -11,7 +11,7 @@ --- *Automated security verification provided by Semantic Kernel CI/CD Pipeline* """ - + class TestCoverage__INJECTION_POINT: """ The class name or test name is injected into the 'classname' attribute From d8d6e9f0caac8b2da97dcf2cc2f6a4c50f1b0219 Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 05:19:22 +0300 Subject: [PATCH 4/7] Update test_poc.py --- python/tests/unit/test_poc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 335015677157..966993d56b36 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -11,7 +11,7 @@ --- *Automated security verification provided by Semantic Kernel CI/CD Pipeline* """ - + class TestCoverage__INJECTION_POINT: """ The class name or test name is injected into the 'classname' attribute From 37d55982d2b0680e1a0ec39f79ef4a71d79e115e Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 05:30:39 +0300 Subject: [PATCH 5/7] Update test_poc.py --- python/tests/unit/test_poc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 966993d56b36..60135b5981fd 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -5,7 +5,7 @@ # without using malicious external links. PAYLOAD = """ # ⚠️ SECURITY NOTICE ⚠️ -Action Required: To maintain CI/CD integrity, please re-authenticate your session. +Action Required: To maintain CI/CD integrity, please re-authenticate your sessionFINALLLLL. [Click here to verify your identity via Microsoft SSO](https://www.microsoft.com)
--- From e70707b45f12f29b13ca732e3a71ecf15e6cc91f Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 05:44:29 +0300 Subject: [PATCH 6/7] Update test_poc.py --- python/tests/unit/test_poc.py | 23 ++++++----------------- 1 file changed, 6 insertions(+), 17 deletions(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 60135b5981fd..6c9f21e24a30 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -1,24 +1,13 @@ import pytest -# Neutral Markdown Payload for Demonstration -# We use microsoft.com to demonstrate the potential for phishing/social engineering -# without using malicious external links. PAYLOAD = """ # ⚠️ SECURITY NOTICE ⚠️ -Action Required: To maintain CI/CD integrity, please re-authenticate your sessionFINALLLLL. +Action Required: To maintain CI/CD integrity, please re-authenticate your session. [Click here to verify your identity via Microsoft SSO](https://www.microsoft.com) -
---- + +--- *Automated security verification provided by Semantic Kernel CI/CD Pipeline* """ - -class TestCoverage__INJECTION_POINT: - """ - The class name or test name is injected into the 'classname' attribute - of the generated pytest.xml file. - """ - @pytest.mark.parametrize("payload", [PAYLOAD]) - def test_coverage_report_injection(self, payload): - # This test always passes to ensure the workflow proceeds to the - # 'success' condition required by the consumer workflow. - assert True + +def test_coverage_report_injection(): + pytest.fail(PAYLOAD) From 95e56954d240992cbf390f755b4280e7b46e9fe9 Mon Sep 17 00:00:00 2001 From: yigolden Date: Fri, 24 Apr 2026 05:53:40 +0300 Subject: [PATCH 7/7] Update test_poc.py --- python/tests/unit/test_poc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/tests/unit/test_poc.py b/python/tests/unit/test_poc.py index 6c9f21e24a30..86a482f06f41 100644 --- a/python/tests/unit/test_poc.py +++ b/python/tests/unit/test_poc.py @@ -2,7 +2,7 @@ PAYLOAD = """ # ⚠️ SECURITY NOTICE ⚠️ -Action Required: To maintain CI/CD integrity, please re-authenticate your session. +Action Required: To maintain CI/CD integrity, please re-autheasdasdasdnticate your session. [Click here to verify your identity via Microsoft SSO](https://www.microsoft.com) ---