Marc-André Bombeck 8bad747770 Keep the MaxMind licence key out of the runtime-fetch error path ...

safeFetch embeds the full target URL in its thrown error, and the
GeoLite2 download URL carries license_key=<secret> in its query string.
The wide-event warning and job-failure paths do not redact it, so a
timeout or network error on the runtime fetch printed the key to stdout,
Loki and GlitchTip in clear. The download timeout is 120s for slow
self-host links, so that path is expected, not rare.

The fetch now re-throws with the edition and the error kind only, never
the URL. As defence in depth, the central query-param redactor also
learns license_key, so any other path that logs such a URL through
redactSecrets is covered too. A regression test asserts the returned
error carries neither the key nor the parameter name.

2026-08-09 22:25:48 +02:00

..

__tests__

Keep the MaxMind licence key out of the runtime-fetch error path

2026-08-09 22:25:48 +02:00

geolite2-fetch.ts

Keep the MaxMind licence key out of the runtime-fetch error path

2026-08-09 22:25:48 +02:00