Tobias GesellchenandClaude Sonnet 4.6 bc52dd3067 sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup ...

Fixes CodeQL go/log-injection alerts in the proxy and setup packages.

Adds logutil.go with a package-private sanitizeLog helper to each package.

pkg/service/proxy/proxy.go (2 call sites):
- LogRequest: r.URL.String(), bodyStr
- LogResponse: r.Request.URL.String(), bodyStr

pkg/service/proxy/recorder.go (1 call site):
- save: task.path (derived from external URL path segments)

pkg/service/setup/setup.go (7 call sites):
- SyncDeviceData: deviceIP, info.Name, info.DeviceID, info.SerialNumber
- syncPresets: deviceIP
- notifySpeakerSourcesUpdated: deviceIP

No behaviour change. golangci-lint and make check pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 16:43:22 +02:00

..

logutil.go

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

patterns_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

patterns.go

Refactor data storage to use account-based hierarchy and update Web UI

2026-02-15 15:36:01 +01:00

proxy_test.go

Fix proxy and recorder tests by ensuring synchronous recording during testing

2026-02-15 21:51:55 +01:00

proxy.go

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

recorder_redact_test.go

Apply 'Redact Sensitive Headers' to recordings

2026-02-15 23:12:19 +01:00

recorder_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

recorder.go

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

scmudc.go

Refactor constants for sources and source providers (#168)

2026-04-17 19:08:50 +02:00