Marc-André Bombeck aeb30464ac chore(observability): add headerValue to the redact denylist ...

The webhook shared secret lives only inside the AES-GCM-encrypted channel
config blob and the GET masks it, so no current path excerpts it into a
wide event. Add headervalue to the sensitive-key denylist as defence in
depth: if a future change ever routes a webhook body through the payload
diagnostic, the secret redacts instead of landing verbatim. The Live
Activity push token is already covered by the token pattern.

2026-06-15 01:28:19 +02:00

..

__tests__

chore(observability): add headerValue to the redact denylist

2026-06-15 01:28:19 +02:00

event-loop-lag.ts

feat(observability): every wide event carries the recent event-loop lag

2026-06-12 20:58:30 +02:00

redact-payload.ts

chore(observability): add headerValue to the redact denylist

2026-06-15 01:28:19 +02:00