From 4ce483f0f4b8c0b4baa8f195c4ed84bddca558c8 Mon Sep 17 00:00:00 2001
From: barry3406 <duan3406@gmail.com>
Date: Thu, 9 Apr 2026 06:35:52 -0700
Subject: [PATCH] test: add tests for supplementary Unicode and
 Proxy-Authorization

- Add TestRenderAsciiJSONSupplementaryUnicode to verify emoji (U+1F600)
  is encoded as UTF-16 surrogate pair (\uD83D\uDE00)
- Add Proxy-Authorization test case to TestSecureRequestDump to verify
  credentials are sanitized in recovery panic logs
---
 recovery_test.go      | 10 ++++++++++
 render/render_test.go | 10 ++++++++++
 2 files changed, 20 insertions(+)

diff --git a/recovery_test.go b/recovery_test.go
index 028c4ad6..8749daba 100644
--- a/recovery_test.go
+++ b/recovery_test.go
@@ -293,6 +293,16 @@ func TestSecureRequestDump(t *testing.T) {
 			wantContains:   "Authorization: *",
 			wantNotContain: "token123",
 		},
+		{
+			name: "Proxy-Authorization header",
+			req: func() *http.Request {
+				r, _ := http.NewRequest(http.MethodGet, "http://example.com", nil)
+				r.Header.Set("Proxy-Authorization", "Basic cHJveHk6c2VjcmV0")
+				return r
+			}(),
+			wantContains:   "Proxy-Authorization: *",
+			wantNotContain: "Basic cHJveHk6c2VjcmV0",
+		},
 		{
 			name: "No Authorization header",
 			req: func() *http.Request {
diff --git a/render/render_test.go b/render/render_test.go
index f63878b9..85dca068 100644
--- a/render/render_test.go
+++ b/render/render_test.go
@@ -261,6 +261,16 @@ func TestRenderAsciiJSON(t *testing.T) {
 	assert.Equal(t, "3.1415926", w2.Body.String())
 }
 
+func TestRenderAsciiJSONSupplementaryUnicode(t *testing.T) {
+	w := httptest.NewRecorder()
+	data := map[string]string{"emoji": "😀"}
+
+	err := (AsciiJSON{data}).Render(w)
+	require.NoError(t, err)
+	// U+1F600 must be encoded as UTF-16 surrogate pair per RFC 8259
+	assert.Equal(t, "{\"emoji\":\"\\ud83d\\ude00\"}", w.Body.String())
+}
+
 func TestRenderAsciiJSONFail(t *testing.T) {
 	w := httptest.NewRecorder()
 	data := make(chan int)