Tobias GesellchenandClaude Opus 4.7 be45b3485d fix(security): always redact credential headers in proxy logs ...

CodeQL alert #43 (go/clear-text-logging) flagged that headers flow to
log.Printf in pkg/service/proxy/proxy.go. The existing implementation
only redacted when LoggingProxy.Redact was true — an opt-in. CodeQL is
right to flag this: the safety floor for credential-bearing headers
should not depend on caller configuration.

Split the sensitive-header list into two:

* alwaysSensitiveHeaders — Authorization, Proxy-Authorization, Cookie,
  Set-Cookie, X-Api-Key, X-Bose-Token. Redacted unconditionally,
  regardless of LoggingProxy.Redact.
* sensitiveHeaders — kept as a compatibility alias pointing at the same
  list, and still gated on Redact for any future use cases that want
  *additional* opt-in redaction beyond the floor.

Behaviour change is strict tightening: nothing that was previously
hidden becomes visible, and credentials that would have been logged
when Redact was false are now hidden by default.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-10 14:30:55 +02:00

..

patterns_test.go

Refactor data storage to use account-based hierarchy and update Web UI

2026-02-15 15:36:01 +01:00

patterns.go

Refactor data storage to use account-based hierarchy and update Web UI

2026-02-15 15:36:01 +01:00

proxy_test.go

Fix proxy and recorder tests by ensuring synchronous recording during testing

2026-02-15 21:51:55 +01:00

proxy.go

fix(security): always redact credential headers in proxy logs

2026-05-10 14:30:55 +02:00

recorder_redact_test.go

Apply 'Redact Sensitive Headers' to recordings

2026-02-15 23:12:19 +01:00

recorder_test.go

feat: add comprehensive TLS certificate SAN support with wildcard domains

2026-02-24 21:47:20 +01:00

recorder.go

fix(security): close go/path-injection alerts via filepath.IsLocal sanitiser

2026-05-10 14:30:55 +02:00

scmudc.go

Refactor constants for sources and source providers (#168)

2026-04-17 19:08:50 +02:00