Files
bot-bottle/tests/unit
didericis-claude 0661464a58
lint / lint (push) Failing after 2m11s
test / unit (pull_request) Successful in 41s
test / integration (pull_request) Successful in 25s
fix(egress): strip injected Authorization and redact bodies in LOG_FULL path
_log_request and _log_response wrote headers and bodies to stderr verbatim.
_log_request also included the sidecar-injected upstream Authorization value,
exposing live bearer tokens on every allowed request under LOG_FULL.

Apply redact_tokens to all header values and bodies in both log functions;
exclude the authorization header from _log_request entirely since its value
is always a live sidecar-injected credential by the time _log_request runs.

Closes #257
2026-06-25 02:39:54 +00:00
..