Repository navigation

Hide passwords in URLs and -%H headers from the logs - #2000

Open

xroche wants to merge 13 commits into

masterfrom

redact-header-log

Open

Hide passwords in URLs and -%H headers from the logs#2000
xroche wants to merge 13 commits into
masterfrom
redact-header-log

Commits on Oct 21, 2026
- Hide login secrets in the -%H header log
  
  xroche
  and
  claude
  committed
  ab90643
- Log a refused cookie without its value
  
  xroche
  and
  claude
  committed
  8a1214a
- Mask URL passwords in hts-log.txt and log no cookie comment text
  
  xroche
  and
  claude
  committed
  4ac2e94
- Mask only the URL passwords the engine reads, in an exact-size copy
  
  xroche
  and
  claude
  committed
  6206167
- Log addresses without their login instead of rewriting log lines
  
  xroche
  and
  claude
  committed
  9139541
- Hide passwords in URLs and -%H headers from the logs
  
  xroche
  and
  claude
  committed
  a2ad2b0
- Mask URL logins in -%H request lines, Referer and data attributes
  
  xroche
  and
  claude
  committed
  24979ac
- Mask logins in any URL scheme and in argument messages
  
  xroche
  and
  claude
  committed
  62a3124
- Mask logins in quoted list lines, blank-led links and option messages
  
  xroche
  and
  claude
  committed
  14cd49d
- Hide the passwords and tokens the engine has seen in every log line
  
  xroche
  and
  claude
  committed
  a7d7c69
- Hide a password only as a login, and a header token anywhere
  
  xroche
  and
  claude
  committed
  d9e7371
- Mask a password after a user part holding an @, and keep cookie values out of the token set
  
  xroche
  and
  claude
  committed
  5c66d7f
Commits on Oct 22, 2026
- Merge remote-tracking branch 'origin/master' into redact-header-log
  xroche
  committed
  7538878

Commits

Commits on Oct 21, 2026

Commits on Oct 22, 2026