ed21bd20cd
Codex gate: exposing the full multi-line command in the expanded shell card newly surfaces secrets on non-first lines (the collapsed header only ever showed line 1). The old redactor masked only password-shaped fields. Broaden it to mask common secret forms across the WHOLE command: env/colon assignments for *TOKEN/*API_KEY/*SECRET/*ACCESS_KEY/*PRIVATE_KEY/*CREDENTIAL/*CLIENT_SECRET/ *SESSION_KEY and *AUTH*=, --token/--api-key/--secret style flags, Authorization: Bearer/Bot/Token headers, and secret-looking URL query params. Test now drives the REAL redactor (not an identity stub) and asserts non-first-line secrets are masked while the collapsed header stays first-line. |
||
|---|---|---|
| .. | ||
| vendor | ||
| apple-touch-icon.png | ||
| assistant_turn_anchors.js | ||
| boot.js | ||
| commands.js | ||
| favicon-32.png | ||
| favicon-192.png | ||
| favicon-512.png | ||
| favicon-512.svg | ||
| favicon.ico | ||
| favicon.svg | ||
| i18n.js | ||
| icons.js | ||
| index.html | ||
| login.js | ||
| manifest.json | ||
| messages.js | ||
| onboarding.js | ||
| outline.js | ||
| panels.js | ||
| pwa-startup.js | ||
| sessions.js | ||
| style.css | ||
| sw.js | ||
| terminal.js | ||
| ui.js | ||
| workspace.js | ||
