mask secret data rows in data-driven titles (#5693)

Author: DenysKuchma

lib/data/context.js

@@ -68,6 +68,10 @@ function replaceTitle(title, dataRow) {
     return `${title} | {${JSON.stringify(dataRow.data)}}`
   }
 
+  if (typeof dataRow.data.getMasked === 'function') {
+    return `${title} | ${dataRow.data.getMasked()}`
+  }
+
   // if `dataRow` is object and has own `toString()` method,
   // it should be printed
   if (Object.prototype.toString.call(dataRow.data) === Object().toString() && dataRow.data.toString() !== Object().toString()) {

test/unit/data/ui_test.js

@@ -122,4 +122,11 @@ describe('ui', () => {
       expect(dataScenarioConfig.scenarios[0].test.title).to.equal('scenario | {"username":"jon","password":"snow"}')
     })
   })
+
+  describe('secret data rows', () => {
+    it("should not leak a secret data row's value into the title", () => {
+      const dataScenarioConfig = context.Data([new Secret('theSecretPassword')]).Scenario('scenario', () => {})
+      expect(dataScenarioConfig.scenarios[0].test.title).to.equal('scenario | *****')
+    })
+  })
 })