gorkem-bwl
741ee7a92a
fix(security): redact sensitive fields from client-side logs
...
Failed requests logged the full request body to the browser console, so a
failing POST to /auth/login wrote the user's plaintext password where it
could be captured by error-reporting tools, screen shares, or support
sessions.
Redaction is applied centrally in the logger rather than at the call sites,
so every current and future caller is covered:
- createLogData() redacts context before it is serialized, covering the
JSON branches of error() and warn().
- The debug-level branches of error() and warn() printed the raw context
object directly, bypassing createLogData(); they now print the redacted
copy.
- debug() and info() redact their free-form data argument.
Keys are matched case-insensitively on a substring after stripping dashes
and underscores, so password, newPassword, X-Api-Key and Authorization are
all caught. The walk copies rather than mutates the caller's object, cuts
genuine cycles without mislabelling repeated siblings, and renders
FormData/Blob as a type marker instead of walking them.
Affected paths were POST (/auth/login, /auth/register) and PATCH/PUT, which
carry monitor secrets. Error-level logging is on by default, so this was
not limited to debug builds.
Fixes #3843
2026-08-17 12:27:02 -04:00
Alexander Holliday
f97ca8565a
Merge pull request #3829 from bluewave-labs/chore/form-refactor
...
chore: form refactor
2026-08-12 10:24:24 -07:00
Alex Holliday
b5f8faf1e8
add missing rocket chat label
2026-08-12 10:22:56 -07:00
Alexander Holliday
b088101160
Merge branch 'develop' into chore/form-refactor
2026-08-12 10:15:10 -07:00
Alex Holliday
521827e1d0
memoize options
2026-08-11 17:50:47 -07:00
Alex Holliday
7dd378f085
remove duplicates
2026-08-11 17:26:15 -07:00
Alex Holliday
a7fb235c56
fix monitor types
2026-08-11 17:24:03 -07:00
Alex Holliday
7f68d23566
fix non sortable styling
2026-08-11 17:21:51 -07:00
Alex Holliday
caebb93748
derive options from roles, wire error state
2026-08-11 17:15:15 -07:00
Alex Holliday
5640068907
fix placeholder
2026-08-11 17:10:48 -07:00
Alex Holliday
441ecddf92
fix unresolved IDs
2026-08-11 17:08:18 -07:00
Alex Holliday
2765ebfc3b
bug fixes
2026-08-07 11:50:47 -07:00
Alex Holliday
d0c8da1653
remove dead default values
2026-08-07 10:41:16 -07:00
Alex Holliday
5916d0ca33
refactor recovery and set new password
2026-08-07 10:32:01 -07:00
Alex Holliday
69db716f0b
refactor login page
2026-08-07 10:29:46 -07:00
Alex Holliday
350083d179
refactor Profile tab
2026-08-07 10:25:04 -07:00
Alex Holliday
11a6ee71e9
refacotr add team/invite team member
2026-08-07 10:22:43 -07:00
Alex Holliday
eaf93668f5
refactor password tab
2026-08-07 10:13:56 -07:00
Alex Holliday
59267ef451
refactor edit user
2026-08-07 10:08:27 -07:00
Alex Holliday
35f9381573
refactor register page
2026-08-07 10:06:09 -07:00
Alex Holliday
3df85b7522
refacotr add team member dialog
2026-08-07 09:54:08 -07:00
Alex Holliday
012e09d30c
refactor tags create page
2026-08-07 09:47:11 -07:00
Alexander Holliday
4b921f4986
Merge pull request #3826 from Glazzze/docs/clarify-mongodb-deployment-3823
...
docs(readme): clarify MongoDB requirement for single-image deployment
2026-08-07 09:27:11 -07:00
Alex Holliday
0eff052258
refactor maintenance create page
2026-08-06 15:05:16 -07:00
Alex Holliday
52c80b9a39
refactor status page create page
2026-08-06 14:40:21 -07:00
Alex Holliday
6ceb28d3a1
remove dead keys
2026-08-06 12:33:35 -07:00
Alex Holliday
08bd2d56f3
refactor settings page
2026-08-06 12:31:20 -07:00
Alex Holliday
05f265743b
remove unsued
2026-08-06 11:55:19 -07:00
Alex Holliday
bc2115f578
refacotr notification create page
2026-08-06 11:54:46 -07:00
Alex Holliday
c1e9fd6079
refactor sliders
2026-08-06 11:00:37 -07:00
Alex Holliday
226864079c
refactor sliders
2026-08-06 10:50:37 -07:00
Alex Holliday
7cab326ad3
refactor selects
2026-08-06 10:17:32 -07:00
Glazzze
94f1f7e576
docs(readme): clarify MongoDB requirement for single-image deployment
2026-08-06 11:41:01 +08:00
Alex Holliday
20d1d1407b
remove dead key
2026-08-05 11:53:49 -07:00
Alex Holliday
da7e8a1ae8
add missing remove button label
2026-08-05 11:52:47 -07:00
Alex Holliday
c578387261
fix label and description regression
2026-08-05 11:51:20 -07:00
Alex Holliday
c5ef61e64c
refactor radio and multi select autocomplete
2026-08-05 11:44:47 -07:00
Alex Holliday
6e1e5dd1a5
create bound components for text input and radio input
2026-08-05 10:51:48 -07:00
Alexander Holliday
514ee0d30b
Merge pull request #3822 from mdiniz97/feat/rocket-chat-notifications
...
feat: Rocket.Chat notifications
2026-08-05 09:33:42 -07:00
Alexander Holliday
623db938f5
Merge pull request #3825 from bluewave-labs/fix/check-snapshot
...
fix: check snapshot
2026-08-05 09:20:57 -07:00
Marcos Paulo Diniz
1c291bb893
refactor(client): use raw channel types
...
Refs #3821
2026-08-05 08:35:56 -03:00
Marcos Paulo Diniz
466d356ad1
refactor(validation): use Zod URL protocols
...
Refs #3821
2026-08-05 08:34:12 -03:00
Marcos Paulo Diniz
0c184e6d0c
fix(notifications): guard incident link
...
Refs #3821
2026-08-05 08:33:29 -03:00
Alex Holliday
303f47a117
add opt out flag for recent checks
2026-08-04 15:30:34 -07:00
Alex Holliday
5fa74bd883
replace findAll with findAllForScheduling
2026-08-04 15:16:03 -07:00
Alex Holliday
4c8342f379
fix pretty name bug, ordering bug
2026-08-04 14:46:52 -07:00
Alex Holliday
dfcb3b4b21
slim check snapshot model/types
2026-08-04 11:27:32 -07:00
Marcos Paulo Diniz
2e19b85a2d
docs(notifications): document Rocket.Chat
...
Refs #3821
2026-08-02 01:59:58 -03:00
Marcos Paulo Diniz
5774cb0e06
feat(client): expose Rocket.Chat channel
...
Refs #3821
2026-08-02 01:59:34 -03:00
Marcos Paulo Diniz
750fc9e238
feat(notifications): add Rocket.Chat provider
...
Refs #3821
2026-08-02 01:59:11 -03:00
gorkem-bwl
Alexander Holliday
Glazzze
Marcos Paulo Diniz