@sayknow-cli/utils 0.5.13 → 0.5.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +2 -2
- package/src/postmortem.ts +4 -2
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"type": "module",
|
|
3
3
|
"name": "@sayknow-cli/utils",
|
|
4
|
-
"version": "0.5.
|
|
4
|
+
"version": "0.5.14",
|
|
5
5
|
"description": "Shared utilities for pi packages",
|
|
6
6
|
"homepage": "https://sayknow-cli.com",
|
|
7
7
|
"author": "jaybeyond",
|
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
"fmt": "biome format --write ."
|
|
32
32
|
},
|
|
33
33
|
"dependencies": {
|
|
34
|
-
"@sayknow-cli/natives": "0.5.
|
|
34
|
+
"@sayknow-cli/natives": "0.5.14",
|
|
35
35
|
"beautiful-mermaid": "^1.1.3",
|
|
36
36
|
"handlebars": "^4.7.9",
|
|
37
37
|
"winston": "^3.19.0",
|
package/src/postmortem.ts
CHANGED
|
@@ -252,9 +252,11 @@ function redactCrashSecrets(text: string): string {
|
|
|
252
252
|
);
|
|
253
253
|
// Basic-auth credentials embedded in a URL. Scheme and host stay readable
|
|
254
254
|
// because they are the diagnostic value; only the userinfo is dropped. The
|
|
255
|
-
// scheme
|
|
255
|
+
// scheme-character run is boundary anchored so a long alphabetic run cannot
|
|
256
|
+
// go quadratic, while leading digits and scheme punctuation stay in the
|
|
257
|
+
// capture so longer and boundary-adjacent URLs still redact.
|
|
256
258
|
redacted = redacted.replace(
|
|
257
|
-
/(?<![A-Za-z0-9+.-])([a-z][a-z0-9+.-]
|
|
259
|
+
/(?<![A-Za-z0-9+.-])([0-9+.-]*[a-z][a-z0-9+.-]*:\/\/)[^/\s:@]{1,256}:[^/\s@]{1,256}@/gi,
|
|
258
260
|
"$1«redacted-url-credential»@",
|
|
259
261
|
);
|
|
260
262
|
// AKIA is the long-term AWS access key id; ASIA the temporary/STS one, which
|