fix(egress): strip Authorization before DLP scan #212

Merged
didericis merged 1 commits from fix/egress-strip-auth-before-scan into main 2026-06-07 22:36:01 -04:00
Collaborator

Summary

Moves Authorization stripping to happen before the DLP scan rather than after, and removes the auth_header parameter from scan_outbound.

The original order was: DLP scan (including auth header) → strip auth → route decision. The new order is: strip auth → DLP scan (body only) → route decision.

Merge rule(s)

Targets feat/egress-log-option; merge that branch first, then rebase this one to main.

## Summary Moves `Authorization` stripping to happen before the DLP scan rather than after, and removes the `auth_header` parameter from `scan_outbound`. The original order was: DLP scan (including auth header) → strip auth → route decision. The new order is: strip auth → DLP scan (body only) → route decision. ## Merge rule(s) Targets `feat/egress-log-option`; merge that branch first, then rebase this one to `main`.
didericis changed target branch from feat/egress-log-option to main 2026-06-07 20:32:49 -04:00
didericis added 1 commit 2026-06-07 22:30:18 -04:00
fix(egress): strip Authorization before DLP scan; remove auth_header param from scan_outbound
test / unit (pull_request) Successful in 32s
test / integration (pull_request) Successful in 46s
lint / lint (push) Successful in 1m27s
test / unit (push) Successful in 35s
test / integration (push) Successful in 42s
Update Quality Badges / update-badges (push) Successful in 1m20s
a04aed098d
didericis force-pushed fix/egress-strip-auth-before-scan from fcdcfe9a48 to a04aed098d 2026-06-07 22:30:18 -04:00 Compare
didericis merged commit a04aed098d into main 2026-06-07 22:36:01 -04:00
didericis deleted branch fix/egress-strip-auth-before-scan 2026-06-07 22:36:02 -04:00
Sign in to join this conversation.