Skip to content

fix(ng-dev): sanitize credentials and tokens from GitClient logs and errors#3762

Open
josephperrott wants to merge 3 commits into
angular:mainfrom
josephperrott:fix/sec-git-client-sanitize-58c20eaf
Open

fix(ng-dev): sanitize credentials and tokens from GitClient logs and errors#3762
josephperrott wants to merge 3 commits into
angular:mainfrom
josephperrott:fix/sec-git-client-sanitize-58c20eaf

Conversation

@josephperrott
Copy link
Copy Markdown
Member

Addresses 58c20eaf. Redacts credentials and GitHub tokens from GitClient and AuthenticatedGitClient logs and error messages/stacks.

@josephperrott josephperrott added the target: patch This PR is targeted for the next patch release label Jun 6, 2026
@josephperrott josephperrott requested a review from alan-agius4 June 6, 2026 02:20
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request enhances the GitClient and AuthenticatedGitClient to sanitize HTTP credentials and process errors in console outputs, and introduces a new test suite to verify these changes. The feedback recommends improving cross-platform compatibility in the tests by replacing hardcoded /tmp paths with os.tmpdir(), and requests the removal of leftover debugging console.log statements.

Comment thread ng-dev/utils/test/git-client.spec.ts
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
Comment thread ng-dev/utils/test/git-client.spec.ts Outdated
@josephperrott josephperrott added action: merge The PR is ready for merge by the caretaker and removed target: patch This PR is targeted for the next patch release labels Jun 6, 2026
@josephperrott josephperrott force-pushed the fix/sec-git-client-sanitize-58c20eaf branch from 2432d52 to f6636ea Compare June 6, 2026 14:35
@josephperrott josephperrott force-pushed the fix/sec-git-client-sanitize-58c20eaf branch from f6636ea to fccae4f Compare June 6, 2026 21:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant