29262578350
100%

Ran 13 Jul 2026 03:34PM UTC

Jobs 1

Files 191

Run time 1min

Badge

Embed ▾

Committed 13 Jul 2026 03:30PM UTC coverage: 100.0%. Remained the same

Build # 29262578350

Build Type

push

github

Committed by

nicolaasuni

Commit Message

fix(redact)!: close secret leaks and over-redaction, kill a redaction DoS, drop the global Luhn toggle

- Closes cleartext leaks: passwd/newpassword/nationalId/connectionString-style keys, escaped JSON in string values (incl. Python/JS spacing), PGP secret keys, oversized inline PEM tails, OAuth URL-fragment tokens, trace-prefixed headers, dir-JWE/detached-JWS, and {name:<secret>,value:...} pairs in JSON and HTML attributes.
- Stops over-redaction of non-secret data: JWKS arrays, metrics and cloud tags, securityContext/security_group/remoteAddr/Secure-flag keys, CSP/HSTS/auth-challenge headers, and sk- CSS classes.
- Bounds the inline-PEM and XML comment/CDATA scans so hostile input can no longer go quadratic; the zero-value Redactor no longer panics.
- Removes the process-global SetLuhnCheck/LuhnCheckEnabled — the Luhn gate is instance-scoped via New(WithLuhnCheck(true)).

BREAKING CHANGE: SetLuhnCheck and LuhnCheckEnabled are removed. Use redact.New(redact.WithLuhnCheck(true)); the package-level functions always run with the Luhn gate off.

Coverage Stats

16751 of 16751 relevant lines covered (100.0%)

4141.66 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	29262578350.1	13 Jul 2026 03:34PM UTC	191	100.0	GitHub Action Run

tecnickcom / nurago / 29262578350
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 29262578350

tecnickcom / nurago / 29262578350 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 29262578350

tecnickcom / nurago / 29262578350
100%

README BADGES
x