64cb4cef4e
Codex re-gate: the env/AUTH '=' redaction regex matched 'token=' INSIDE a URL (?token=...&mode=debug&signature=...) before the dedicated URL-query redactor, and its \S+ value swallowed the rest of the URL incl later params + closing quote. Anchor the env-assignment match to a shell-token boundary (^|[\s;|(]) so it can't match keys preceded by ? or & — URL query params are left to the dedicated query-param redactor, which masks the secret-looking ones while preserving the command tail. + regression tests (URL-tail-preserved, benign-PATH-not-over-redacted). |
||
|---|---|---|
| .. | ||
| vendor | ||
| apple-touch-icon.png | ||
| assistant_turn_anchors.js | ||
| boot.js | ||
| commands.js | ||
| favicon-32.png | ||
| favicon-192.png | ||
| favicon-512.png | ||
| favicon-512.svg | ||
| favicon.ico | ||
| favicon.svg | ||
| i18n.js | ||
| icons.js | ||
| index.html | ||
| login.js | ||
| manifest.json | ||
| messages.js | ||
| onboarding.js | ||
| outline.js | ||
| panels.js | ||
| pwa-startup.js | ||
| sessions.js | ||
| style.css | ||
| sw.js | ||
| terminal.js | ||
| ui.js | ||
| workspace.js | ||
