fix: satisfy pyright for log redaction tests

fix(egress): strip injected Authorization and redact bodies in LOG_FULL path
_log_request and _log_response wrote headers and bodies to stderr verbatim. _log_request also included the sidecar-injected upstream Authorization value, exposing live bearer tokens on every allowed request under LOG_FULL. Apply redact_tokens to all header values and bodies in both log functions; exclude the authorization header from _log_request entirely since its value is always a live sidecar-injected credential by the time _log_request runs. Closes #257
2026-06-25 00:32:42 -04:00 · 2026-06-25 00:32:42 -04:00 · 2026-06-25 04:19:30 +00:00
1 changed files with 1 additions and 1 deletions
@@ -1,4 +1,4 @@
-# PRD prd-new: Strengthen outbound exfiltration detection
+# PRD 0063: Strengthen outbound exfiltration detection

 - **Status:** Active
 - **Author:** claude
Author	SHA1	Message	Date
didericis-codex	e7dacf7d86	fix: satisfy pyright for log redaction tests test / integration (pull_request) Successful in 29s Details prd-number / assign-numbers (push) Successful in 1m6s Details Update Quality Badges / update-badges (push) Successful in 1m40s Details test / unit (pull_request) Successful in 52s Details lint / lint (push) Successful in 2m20s Details test / unit (push) Successful in 50s Details test / integration (push) Successful in 27s Details	2026-06-25 00:32:42 -04:00
didericis-claude	9b929d0684	fix(egress): strip injected Authorization and redact bodies in LOG_FULL path _log_request and _log_response wrote headers and bodies to stderr verbatim. _log_request also included the sidecar-injected upstream Authorization value, exposing live bearer tokens on every allowed request under LOG_FULL. Apply redact_tokens to all header values and bodies in both log functions; exclude the authorization header from _log_request entirely since its value is always a live sidecar-injected credential by the time _log_request runs. Closes #257	2026-06-25 00:32:42 -04:00
github-actions[bot]	ec41f629a4	ci(prd): assign sequential numbers to new PRDs	2026-06-25 04:19:30 +00:00