Tobias GesellchenandClaude Sonnet 4.6 bc52dd3067 sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup ...

Fixes CodeQL go/log-injection alerts in the proxy and setup packages.

Adds logutil.go with a package-private sanitizeLog helper to each package.

pkg/service/proxy/proxy.go (2 call sites):
- LogRequest: r.URL.String(), bodyStr
- LogResponse: r.Request.URL.String(), bodyStr

pkg/service/proxy/recorder.go (1 call site):
- save: task.path (derived from external URL path segments)

pkg/service/setup/setup.go (7 call sites):
- SyncDeviceData: deviceIP, info.Name, info.DeviceID, info.SerialNumber
- syncPresets: deviceIP
- notifySpeakerSourcesUpdated: deviceIP

No behaviour change. golangci-lint and make check pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-24 16:43:22 +02:00

..

testdata

fix(setup): atomic CA-bundle install with PEM-frame verification

2026-05-15 15:05:41 +02:00

build_https_url_test.go

feat(service): validate server_url and surface resolved DNS intercept IP

2026-05-14 14:49:23 +02:00

ca_validation_test.go

docs(setup): record ST10 ≡ ST20 bundle equivalence + curl reproducer

2026-05-16 16:23:23 +02:00

ca_validation.go

fix(setup): atomic CA-bundle install with PEM-frame verification

2026-05-15 15:05:41 +02:00

device_info_parsing_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

factory_reset_test.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

factory_reset.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

init_plan_test.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

init_plan.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

inspect_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

inspect.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

issue218_regression_test.go

test(fakespeaker): wire issue-specific payloads via Config.FixtureOverrides

2026-05-15 14:13:24 +02:00

issue234_regression_test.go

fix(setup): fire <sourcesUpdated/> after data sync to recover post-factory-reset sources

2026-05-15 16:25:07 +02:00

issue235_regression_test.go

test(setup): wire issue #235 — Spotify Connect /now_playing reports IsPresetable=false

2026-05-15 14:13:24 +02:00

logutil.go

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

marge_pairing_test.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

marge_pairing.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

migration_state_telnet_test.go

fix(setup): correct false-positive migration detection and plan command errors

2026-05-22 18:58:57 +02:00

migration_summary_telnet_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_probe_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_probe.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

preflight_crosscheck_test.go

fix(setup,web): parse the protobuf-text getpdo reply real devices send

2026-05-11 00:37:11 +02:00

preflight_crosscheck.go

fix(setup,web): parse the protobuf-text getpdo reply real devices send

2026-05-11 00:37:11 +02:00

reboot_test.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

setup_session_test.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

setup_session.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

setup_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

setup.go

sec5c: sanitize log-injection in pkg/service/proxy and pkg/service/setup

2026-05-24 16:43:22 +02:00

ssh_probe_apply.go

refactor(setup): split high-complexity functions into per-axis helpers

2026-05-13 18:43:36 +02:00

ssh_probe.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

sync_deviceid_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

sync_regression_test.go

feat(sync): improve parity with upstream during data sync (#123)

2026-03-22 00:01:41 +01:00

telnet_migration_test.go

feat(setup): per-field telnet URLs with envswitch derivation rule

2026-05-11 00:37:11 +02:00

telnet_migration.go

feat(setup): per-field telnet URLs with envswitch derivation rule

2026-05-11 00:37:11 +02:00

telnet_preflight_test.go

feat(setup): read-only telnet preflight populating MigrationSummary

2026-05-11 00:37:11 +02:00

telnet_preflight.go

feat(setup): read-only telnet preflight populating MigrationSummary

2026-05-11 00:37:11 +02:00

telnet_urls_test.go

style(setup): satisfy govet shadow + thelper lints

2026-05-11 00:37:11 +02:00

url_overrides_test.go

feat(setup): XML migration honors per-field URL overrides

2026-05-11 00:37:11 +02:00

wifi_provision_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

wifi_provision.go

fix(cli): retry wifi-push once when the speaker's first ACK times out

2026-05-16 12:14:18 +02:00