Development record
The hard_fail local_username redaction matcher (m.localBare) is built without the (?i) its home-path sibling carries, so on a case-folding filesystem a case variant of the caller login (EVE/Eve) is neither redacted nor caught by the blocking residual scan, leaking the login into the stored transcript.
issueresolvedmajoriss-2608221456469938
The hard_fail local_username redaction matcher (m.localBare) is built without the (?i) its home-path sibling carries, so on a case-folding filesystem a case variant of the caller login (EVE/Eve) is neither redacted nor caught by the blocking residual scan, leaking the login into the stored transcript.
Frontmatter
| id | iss-2608221456469938 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | major |
.abcd/work/issues/resolved/iss-2608221456469938-the-hard-fail-local-username-redaction.md
open on GitHub ↗ · commit history ↗