Claude 34a5aa01d5 fix(playlist): mask every password parameter on cards, skip host labels inside URLs ...

- Card display now hides the value of EVERY password query parameter and
  recognizes percent-encoded names ('pass%77ord'), which URLSearchParams —
  and therefore the importer — reads as 'password'. The URL stays otherwise
  byte-identical so the user still recognizes their link.
- The host-label matcher keeps scanning past host-shaped query keys inside
  unrelated links ('/setup?url=guide') instead of discarding the field, so a
  real 'Server:' line further down still wins the credentials.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JE1De2dfyRZMYh4H2iGXb4

2026-08-16 06:14:37 +00:00

..

database

feat(downloads): queue season episode downloads (#1357)

2026-08-03 08:53:44 +02:00

interfaces

fix(playlist): mask every password parameter on cards, skip host labels inside URLs

2026-08-16 06:14:37 +00:00

logging

fix(skills): align repository guidance with implementation (#1315)

2026-07-31 08:00:59 +02:00

m3u-utils

refactor(deps): drop uuid for a shared crypto-based id helper (#1266)

2026-07-26 22:27:31 +02:00

marketing-fixtures

feat(mock-data): add shared screenshot-safe poster catalog (#1271)

2026-07-27 08:10:57 +02:00

testing

chore(test): clean lint and warning baseline

2026-05-26 19:30:21 +02:00