4grayandClaude Opus 5.5 a4e4bcd880 fix(sources): clean credentials nested in kept URL parts ...

Codex bot (PR review, P1): stripUrlCredentials copied every non-sensitive
parameter value unchanged, so a URL nested in one (a proxy's
?url=http%3A%2F%2Fjoe%3Ahunter2%40origin.test%2F…) kept its userinfo and
password and reached the Sources row through sourceDisplayUrl.

Kept query and fragment values and path segments are now cleaned
recursively, up to four levels: a nested URL loses its credentials the
same way, a nested parameter list loses its sensitive keys, and a part
that still names a secret (joe:hunter2@host, token=…) is dropped. Deeper
nesting is dropped rather than shown.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 20:24:47 +02:00

..

database

fix(playlist): keep cleared optional fields cleared on desktop (#1904)

2026-10-12 23:08:35 +02:00

host-health

perf(ci): run Tier A coverage concurrently with isolatedModules ts-jest (#1701)

2026-09-26 23:05:26 +02:00

interfaces

fix(sources): own Undo timer, per-connection health history, race-free perf waits

2026-10-13 18:03:44 +02:00

logging

fix(sources): clean credentials nested in kept URL parts

2026-10-13 20:24:47 +02:00

m3u-utils

feat(playback): draw catch-up programmes as seek-bar segments (#1750)

2026-09-29 19:34:38 +02:00

marketing-fixtures

chore(deps): upgrade Angular to 22.1 and Nx to 23.2 (#1603)

2026-09-14 19:02:40 +02:00

testing

chore(test): clean lint and warning baseline

2026-05-26 19:30:21 +02:00