4grayandClaude Opus 5.5 64271ba50f fix(sources): read Xtream paths decoded; keep short decoded forms out ...

- An Xtream account could hide behind encoded separators
  (`live%2Fjoe%2Fhunter2%2F1.ts` is one raw segment). `findXtreamAccount`
  reads the path as decoded parts, maps them back to raw segments, and is
  the one scanner for the log redactor, the on-screen URL and the name
  check. Account segments go whole, joined ones included.
- The name check required a minimum length only of the raw secret, so a
  decoded form as short as one letter (`%2542` is `B`) hid ordinary
  names. Each form must now be long enough on its own.
- The decoding helpers move to `url-credential-parts.ts`, which keeps the
  redactor under the line limit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 00:31:37 +02:00

..

ui

fix(sources): keep a browser refresh busy until the backend answers

2026-10-13 23:43:56 +02:00

util

fix(sources): read Xtream paths decoded; keep short decoded forms out

2026-10-14 00:31:37 +02:00