Codex gate: raising content args from 120->4000 chars newly surfaces secrets on non-first lines / past char 120 in render paths that print tc.args directly and bypass the #4926 label redaction. Apply _redactToolTargetLabel to arg values at every such site: the transparent Full-tab args render (_transparentToolDetailHtml), the non-transparent tool-card args block (buildToolCard visibleArgs), the clipboard copy path (_copyEventToClipboard), and the _toolArgsSnapshot itself. + node regression proving a secret past char 120 in a long command is masked in the Full tab while the non-secret command structure is retained. |
||
|---|---|---|
| .. | ||
| vendor | ||
| apple-touch-icon.png | ||
| assistant_turn_anchors.js | ||
| boot.js | ||
| commands.js | ||
| favicon-32.png | ||
| favicon-192.png | ||
| favicon-512.png | ||
| favicon-512.svg | ||
| favicon.ico | ||
| favicon.svg | ||
| i18n.js | ||
| icons.js | ||
| index.html | ||
| login.js | ||
| manifest.json | ||
| messages.js | ||
| onboarding.js | ||
| outline.js | ||
| panels.js | ||
| pwa-startup.js | ||
| sessions.js | ||
| style.css | ||
| sw.js | ||
| terminal.js | ||
| ui.js | ||
| workspace.js | ||