Tobias GesellchenandClaude Sonnet 4.6 bc52dd3067 sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup ...

Fixes CodeQL go/log-injection alerts in the proxy and setup packages.

Adds logutil.go with a package-private sanitizeLog helper to each package.

pkg/service/proxy/proxy.go (2 call sites):
- LogRequest: r.URL.String(), bodyStr
- LogResponse: r.Request.URL.String(), bodyStr

pkg/service/proxy/recorder.go (1 call site):
- save: task.path (derived from external URL path segments)

pkg/service/setup/setup.go (7 call sites):
- SyncDeviceData: deviceIP, info.Name, info.DeviceID, info.SerialNumber
- syncPresets: deviceIP
- notifySpeakerSourcesUpdated: deviceIP

No behaviour change. golangci-lint and make check pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 16:43:22 +02:00

..

client

chore: sweep example LAN IPs to RFC-5737 in source and config files

2026-05-17 22:05:13 +02:00

config

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

discovery

feat(dns): auto-derive OAuth subdomain from serverURL hostname (#337)

2026-05-23 00:34:36 +02:00

models

feat(tunein): add section-grouped results and load-more pagination

2026-05-23 14:25:01 +02:00

service

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

speaker

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

ssh

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

telnet

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

testutils

feat: add Amazon LWA mock server (testutils + integration mocks)

2026-04-29 20:30:06 +02:00