agent-sanitizer 2.40.2 → 2.40.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THREAT-MODEL.md +1 -1
- package/package.json +1 -1
package/THREAT-MODEL.md
CHANGED
|
@@ -183,7 +183,7 @@ normalizer so they cannot drift.
|
|
|
183
183
|
|
|
184
184
|
**Detection.** detect-secrets is the single oracle — its bundled plugins plus
|
|
185
185
|
gitleaks-sourced ones for formats it lacks — extended with a regex
|
|
186
|
-
for the unquoted `key=value` shapes
|
|
186
|
+
for the unquoted `key=value` shapes the keyword detector misses, PEM block
|
|
187
187
|
collapse, cross-line reassembly of a secret split across lines, and exact-match
|
|
188
188
|
redaction of caller-supplied env-var **values**. Each hit becomes
|
|
189
189
|
`[REDACTED: <label>]` and its label joins `found`.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "agent-sanitizer",
|
|
3
|
-
"version": "2.40.
|
|
3
|
+
"version": "2.40.3",
|
|
4
4
|
"description": "Defend an agent against hidden-content injection: strip payload-capable invisible Unicode and ANSI, splice out human-invisible HTML, and flag data-exfil URLs in untrusted text before any model sees it.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"repository": {
|