fix(egress): strip Authorization before DLP scan #212
Reference in New Issue
Block a user
Delete Branch "fix/egress-strip-auth-before-scan"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Moves
Authorizationstripping to happen before the DLP scan rather than after, and removes theauth_headerparameter fromscan_outbound.The original order was: DLP scan (including auth header) → strip auth → route decision. The new order is: strip auth → DLP scan (body only) → route decision.
Merge rule(s)
Targets
feat/egress-log-option; merge that branch first, then rebase this one tomain.fcdcfe9a48toa04aed098d