get('/up'); $response->assertOk(); } public function test_up_endpoint_does_not_expose_secrets(): void { $response = $this->get('/up'); $content = $response->getContent() ?? ''; $this->assertStringNotContainsString((string) config('app.key'), $content); $this->assertStringNotContainsString((string) env('DB_PASSWORD'), $content); $this->assertStringNotContainsString('Stack trace', $content); $this->assertStringNotContainsString('APP_KEY', $content); } }