odysseus

mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-06-22 20:55:29 -04:00

Files

T

nopoz 7e5db9a3c6 fix(security): redact credential-bearing URLs and PII from logs (#4750 )

* fix(security): redact credential-bearing URLs and PII from logs

Several log statements emitted sensitive data in clear text:

- model_routes / chat_routes / contacts_routes logged endpoint URLs raw.
  Admin-configured URLs can embed credentials in userinfo or query
  (e.g. https://user:pass@host, ?api_key=...). Route them through a
  shared core.log_safety.redact_url() that drops userinfo/query/fragment.
- note_routes / task_scheduler logged operator email addresses (smtp_user,
  recipient). Replaced with presence booleans, which keeps the diagnostic
  ("why didn't this send") without writing PII to logs.

model_routes already had a local redactor on its HTTPStatusError branch;
the generic except branch was missed, so reuse the existing helper there.

Clears CodeQL py/clear-text-logging-sensitive-data alerts 264, 317, 324,
325, 343, 344, 528.

* fix(security): re-bracket IPv6 hosts and single-source the URL redactor

Address review on #4750:
- redact_url now re-brackets IPv6 literals so host:port stays
  unambiguous (https://[2001:db8::1]:8443/v1, not the bracket-less
  ambiguous form).
- point model_routes._redact_url_for_log at the shared helper so the
  two redactors are single-sourced (also picks up the IPv6 fix).

2026-06-22 23:12:39 +02:00

__init__.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

atomic_io.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

auth.py

refactor(auth): centralize the internal-tool pseudo-username into a constant (#4333 )

2026-06-16 13:13:00 +02:00

constants.py

refactor(constants): single source of truth for data dir (#3368 )