4grayandClaude Opus 5.5 a48d0b913f fix(sources): keep fragment and nested URL secrets out of source names ...

Greptile bot (PR review, P1 security): an unnamed import of
https://host.test/list.m3u#api_key=secret123 stored list.m3u#api_key=…
as its title. isUrlDerivedName only knew names ending in a query, and
sourceSecrets only read the top-level query, so the row and the toolbar
showed the secret while the displayed URL hid it.

A name that ends the URL with a query or a fragment is now URL-derived,
and shows the host. The secrets a typed name is checked against now
include sensitive fragment parameters and, as stripUrlCredentials cleans
them, the credentials of URLs and parameter lists nested in parameters
(nested account names included).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 20:27:24 +02:00

..

src

fix(sources): keep fragment and nested URL secrets out of source names

2026-10-13 20:27:24 +02:00

jest.config.ts

feat: add Jest configuration and tests for playlist shared utility

2026-04-04 20:41:07 +02:00

project.json

refactor(playlists): move refresh action to ui boundary

2026-05-22 11:27:04 +03:00

tsconfig.json

chore(deps): upgrade Angular to 22.1 and Nx to 23.2 (#1603)

2026-09-14 19:02:40 +02:00

tsconfig.lib.json

refactor: update nx monorepo structure

2026-03-09 23:24:34 +01:00

tsconfig.spec.json

ci(test): type-check Jest spec programs and gate it in CI (#1705)

2026-09-27 20:54:27 +02:00