Marc-André Bombeck 44e8229ff3 fix(logging): redact http.path + http.route in WideEventBuilder.setHttp ...

Closes the WITHINGS_WEBHOOK_SECRET leak (sec-C1): the api-handler
seeds http.path and http.route from url.pathname, which carries the
shared secret for /api/withings/webhook/<secret> requests. Routing
both fields through redactSecrets() at setHttp() time keeps the
secret out of stdout, the in-memory ring buffer, and Loki egress.

2026-05-14 22:24:42 +02:00

..

__tests__

fix(logging): redact http.path + http.route in WideEventBuilder.setHttp

2026-05-14 22:24:42 +02:00

background.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

config.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

context.ts

fix(validations): route source-priority parse breadcrumb via observer

2026-05-14 18:57:59 +02:00

event-builder.ts

fix(logging): redact http.path + http.route in WideEventBuilder.setHttp

2026-05-14 22:24:42 +02:00

in-memory-buffer.ts

feat(insights): citation footnote on recommendations with medical reference

2026-05-10 00:04:24 +02:00

index.ts

feat(admin): app-log preview surfaces last 1h of structured events with filter + JSON inspector

2026-05-10 00:09:22 +02:00

redact.ts

feat(logging): path-segment secret redaction via PATH_SECRET_PATHS registry

2026-05-14 22:23:49 +02:00

sampler.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

transports.ts

feat(admin): app-log preview surfaces last 1h of structured events with filter + JSON inspector

2026-05-10 00:09:22 +02:00

types.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00