gorkem-bwl
741ee7a92a
fix(security): redact sensitive fields from client-side logs
...
Failed requests logged the full request body to the browser console, so a
failing POST to /auth/login wrote the user's plaintext password where it
could be captured by error-reporting tools, screen shares, or support
sessions.
Redaction is applied centrally in the logger rather than at the call sites,
so every current and future caller is covered:
- createLogData() redacts context before it is serialized, covering the
JSON branches of error() and warn().
- The debug-level branches of error() and warn() printed the raw context
object directly, bypassing createLogData(); they now print the redacted
copy.
- debug() and info() redact their free-form data argument.
Keys are matched case-insensitively on a substring after stripping dashes
and underscores, so password, newPassword, X-Api-Key and Authorization are
all caught. The walk copies rather than mutates the caller's object, cuts
genuine cycles without mislabelling repeated siblings, and renders
FormData/Blob as a type marker instead of walking them.
Affected paths were POST (/auth/login, /auth/register) and PATCH/PUT, which
carry monitor secrets. Error-level logging is on by default, so this was
not limited to debug builds.
Fixes #3843
2026-08-17 12:27:02 -04:00
Alex Holliday
b5f8faf1e8
add missing rocket chat label
2026-08-12 10:22:56 -07:00
Alexander Holliday
b088101160
Merge branch 'develop' into chore/form-refactor
2026-08-12 10:15:10 -07:00
Alex Holliday
521827e1d0
memoize options
2026-08-11 17:50:47 -07:00
Alex Holliday
7dd378f085
remove duplicates
2026-08-11 17:26:15 -07:00
Alex Holliday
a7fb235c56
fix monitor types
2026-08-11 17:24:03 -07:00
Alex Holliday
7f68d23566
fix non sortable styling
2026-08-11 17:21:51 -07:00
Alex Holliday
caebb93748
derive options from roles, wire error state
2026-08-11 17:15:15 -07:00
Alex Holliday
5640068907
fix placeholder
2026-08-11 17:10:48 -07:00
Alex Holliday
441ecddf92
fix unresolved IDs
2026-08-11 17:08:18 -07:00
Alex Holliday
2765ebfc3b
bug fixes
2026-08-07 11:50:47 -07:00
Alex Holliday
d0c8da1653
remove dead default values
2026-08-07 10:41:16 -07:00
Alex Holliday
5916d0ca33
refactor recovery and set new password
2026-08-07 10:32:01 -07:00
Alex Holliday
69db716f0b
refactor login page
2026-08-07 10:29:46 -07:00
Alex Holliday
350083d179
refactor Profile tab
2026-08-07 10:25:04 -07:00
Alex Holliday
11a6ee71e9
refacotr add team/invite team member
2026-08-07 10:22:43 -07:00
Alex Holliday
eaf93668f5
refactor password tab
2026-08-07 10:13:56 -07:00
Alex Holliday
59267ef451
refactor edit user
2026-08-07 10:08:27 -07:00
Alex Holliday
35f9381573
refactor register page
2026-08-07 10:06:09 -07:00
Alex Holliday
3df85b7522
refacotr add team member dialog
2026-08-07 09:54:08 -07:00
Alex Holliday
012e09d30c
refactor tags create page
2026-08-07 09:47:11 -07:00
Alex Holliday
0eff052258
refactor maintenance create page
2026-08-06 15:05:16 -07:00
Alex Holliday
52c80b9a39
refactor status page create page
2026-08-06 14:40:21 -07:00
Alex Holliday
6ceb28d3a1
remove dead keys
2026-08-06 12:33:35 -07:00
Alex Holliday
08bd2d56f3
refactor settings page
2026-08-06 12:31:20 -07:00
Alex Holliday
05f265743b
remove unsued
2026-08-06 11:55:19 -07:00
Alex Holliday
bc2115f578
refacotr notification create page
2026-08-06 11:54:46 -07:00
Alex Holliday
c1e9fd6079
refactor sliders
2026-08-06 11:00:37 -07:00
Alex Holliday
226864079c
refactor sliders
2026-08-06 10:50:37 -07:00
Alex Holliday
7cab326ad3
refactor selects
2026-08-06 10:17:32 -07:00
Alex Holliday
20d1d1407b
remove dead key
2026-08-05 11:53:49 -07:00
Alex Holliday
da7e8a1ae8
add missing remove button label
2026-08-05 11:52:47 -07:00
Alex Holliday
c578387261
fix label and description regression
2026-08-05 11:51:20 -07:00
Alex Holliday
c5ef61e64c
refactor radio and multi select autocomplete
2026-08-05 11:44:47 -07:00
Alex Holliday
6e1e5dd1a5
create bound components for text input and radio input
2026-08-05 10:51:48 -07:00
Alexander Holliday
514ee0d30b
Merge pull request #3822 from mdiniz97/feat/rocket-chat-notifications
...
feat: Rocket.Chat notifications
2026-08-05 09:33:42 -07:00
Marcos Paulo Diniz
1c291bb893
refactor(client): use raw channel types
...
Refs #3821
2026-08-05 08:35:56 -03:00
Marcos Paulo Diniz
466d356ad1
refactor(validation): use Zod URL protocols
...
Refs #3821
2026-08-05 08:34:12 -03:00
Alex Holliday
4c8342f379
fix pretty name bug, ordering bug
2026-08-04 14:46:52 -07:00
Alex Holliday
dfcb3b4b21
slim check snapshot model/types
2026-08-04 11:27:32 -07:00
Marcos Paulo Diniz
5774cb0e06
feat(client): expose Rocket.Chat channel
...
Refs #3821
2026-08-02 01:59:34 -03:00
Alex Holliday
d4782a97a3
add missing verbose flag
2026-07-31 13:05:10 -07:00
Alex Holliday
e0122d3761
hoist props
2026-07-31 13:04:10 -07:00
Alex Holliday
e3b0b33b15
replace duration in monitorstatus, remove dead import
2026-07-31 13:00:58 -07:00
Alex Holliday
19b5976f85
extract formatting durations
2026-07-31 12:58:58 -07:00
Alex Holliday
336dbe4de2
use formatMs function to consistently format point times
2026-07-31 12:40:18 -07:00
Alex Holliday
65c6f567b5
add ms formatting util
2026-07-31 11:55:05 -07:00
Alex Holliday
e81fdb9810
remove unused hook
2026-07-31 11:50:02 -07:00
Alex Holliday
9712579c4d
remove unused imports
2026-07-31 11:45:41 -07:00
Alex Holliday
98e0ffc983
update tooltips
2026-07-31 11:41:18 -07:00
gorkem-bwl
Alex Holliday
Marcos Paulo Diniz