mirror of
https://github.com/navidrome/navidrome.git
synced 2026-10-08 18:37:09 +02:00
The trace-level request log dumps all headers as a JSON blob, but the redaction hook only had query-param patterns, so Authorization, X-Emby-Token, X-MediaBrowser-Token and X-Nd-Authorization leaked their tokens in plaintext. Add one pattern that blanks those header value arrays at the log sink. |
||
|---|---|---|
| .. | ||
| formatters.go | ||
| formatters_test.go | ||
| journal.go | ||
| journal_test.go | ||
| log.go | ||
| log_test.go | ||
| redactrus.go | ||
| redactrus_test.go | ||