08a7d12b9d
- adapter/oauth.py: stop logging request headers on user-info fetch failure; they carry the Bearer access token (py/clear-text-logging-sensitive-data) - adapter/base.py: drop the email value from the invalid-email warning log (py/clear-text-logging-sensitive-data) - provider/oauth/github.py: stop logging organization id / user login on org-membership failure (py/clear-text-logging-sensitive-data) - editor custom-link: rewrite the C0-control strip regex with escaped, non-overlapping ranges instead of raw control bytes overlapping \s (js/overly-large-range); also fixes the file being detected as binary |
||
|---|---|---|
| .. | ||
| adapter | ||
| middleware | ||
| provider | ||
| utils | ||
| views | ||
| __init__.py | ||
| apps.py | ||
| rate_limit.py | ||
| session.py | ||
| urls.py | ||