Tobias GesellchenandClaude Sonnet 4.6 42ada4fe60 sec8: suppress go/clear-text-logging false positive in proxy log call ...

The log.Printf at this line uses formatHeaders, which unconditionally
redacts alwaysSensitiveHeaders (Authorization, Cookie, …) and applies
sanitizeLog to strip newlines from other values. CodeQL cannot model the
custom redaction inside formatHeaders and flags the call.

The lgtm annotation suppresses the false positive. The struct comment
explains the reviewed rationale in full.

Closes CodeQL alert 294 (go/clear-text-logging).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-25 13:14:56 +02:00

..

logutil.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

patterns_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

patterns.go

Refactor data storage to use account-based hierarchy and update Web UI

2026-02-15 15:36:01 +01:00

proxy_test.go

Fix proxy and recorder tests by ensuring synchronous recording during testing

2026-02-15 21:51:55 +01:00

proxy.go

sec8: suppress go/clear-text-logging false positive in proxy log call

2026-05-25 13:14:56 +02:00

recorder_redact_test.go

Apply 'Redact Sensitive Headers' to recordings

2026-02-15 23:12:19 +01:00

recorder_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

recorder.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

scmudc.go

Refactor constants for sources and source providers (#168)

2026-04-17 19:08:50 +02:00