Repository navigation

security: redact CLI logs, bound regex matching (ReDoS) (PER-8609/8615) - #2279

Merged

Shivanshu-07 merged 11 commits into

security/cli-runtime-redact-redos-ssrf

Jul 17, 2026

Merged

security: redact CLI logs, bound regex matching (ReDoS) (PER-8609/8615)#2279
Shivanshu-07 merged 11 commits into
masterfrom
security/cli-runtime-redact-redos-ssrf

Commits on Jun 29, 2026
- security: redact CLI logs, bound regex matching (ReDoS), validate Chromium base URL (PER-8609/8615/8616)
  
  Shivanshu-07
  and
  claude
  committed
  f5bad30
- fix(core): memoize secret patterns so redactSecrets does not blow timeouts
  
  Shivanshu-07
  and
  claude
  committed
  a3388a3
- test(core): cover Chromium base URL validation branches
  
  Shivanshu-07
  and
  claude
  committed
  5ee0b6e
- fix(core): redact Percy tokens in logs (PER-8609)
  
  Shivanshu-07
  and
  claude
  committed
  3e0aae3
Commits on Jul 6, 2026
- revert(core): drop PERCY_CHROMIUM_BASE_URL validation (PER-8616 won't-fix)
  
  Shivanshu-07
  and
  claude
  committed
  794d0e0
Commits on Jul 8, 2026
- chore(core): suppress false-positive non-literal-regexp on first-party secret patterns
  Shivanshu-07
  committed
  7ab92a3
Commits on Jul 9, 2026
- chore(core): add trailing newline to secretPatterns.yml
  
  Shivanshu-07
  and
  claude
  committed
  d31dfe5
Commits on Jul 13, 2026
- fix(core): address redaction review feedback
  
  Shivanshu-07
  and
  claude
  committed
  1f38275
- test(core): de-literalize Percy-token fixture to clear secret-scanning
  
  Shivanshu-07
  and
  claude
  committed
  78f8303
Commits on Jul 14, 2026
- fix(core): redact log entries in place, not into a detached copy
  
  Shivanshu-07
  and
  claude
  committed
  20f6e5b
- fix(core): scope log redaction to message, not structured meta
  
  Shivanshu-07
  and
  claude
  committed
  f1ae531