Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Strip credentials from proxy address in crawl logs #778

Merged
merged 2 commits into from
Feb 26, 2025

Conversation

tw4l
Copy link
Member

@tw4l tw4l commented Feb 26, 2025

Fixes https://github.com/webrecorder/security/issues/14

Adds routine to strip username and password from proxy string, and tests that cover our supported proxyServer input formats.

@tw4l tw4l requested a review from ikreymer February 26, 2025 00:24
@tw4l tw4l merged commit e402ddc into main Feb 26, 2025
4 checks passed
@tw4l tw4l deleted the sec-issue-14-proxy-logs branch February 26, 2025 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants