jira/apps/api/plane/authentication/adapter
sriram veeraghanta 08a7d12b9d
fix: resolve open CodeQL security alerts (#9505)
- adapter/oauth.py: stop logging request headers on user-info fetch
  failure; they carry the Bearer access token (py/clear-text-logging-sensitive-data)
- adapter/base.py: drop the email value from the invalid-email warning
  log (py/clear-text-logging-sensitive-data)
- provider/oauth/github.py: stop logging organization id / user login
  on org-membership failure (py/clear-text-logging-sensitive-data)
- editor custom-link: rewrite the C0-control strip regex with escaped,
  non-overlapping ranges instead of raw control bytes overlapping \s
  (js/overly-large-range); also fixes the file being detected as binary
2026-07-29 20:28:09 +05:30
..
__init__.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
base.py fix: resolve open CodeQL security alerts (#9505) 2026-07-29 20:28:09 +05:30
credential.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
error.py [WEB-7778] fix(security): reject unverified OAuth provider emails to prevent ATO (Cluster E) (#9289) 2026-07-09 16:31:33 +05:30
exception.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
oauth.py fix: resolve open CodeQL security alerts (#9505) 2026-07-29 20:28:09 +05:30