fix(logging): stop leaking env values and secrets in messages, make context serialization non-throwing - #3325

Merged

kojiwakayama merged 26 commits into

mainfrom

fix/logging-credential-leaks

Aug 3, 2026

Commits on Aug 3, 2026

fix(logging): stop leaking env values and secrets in messages, make context serialization non-throwing
kojiwakayama
committed
8bcfee0
test(logging): assert complete sanitized API URL
kojiwakayama
committed
4955b4c
Preserve log fidelity while redacting credential-shaped values
kojiwakayama
committed
238b8aa
fix(logging): harden redaction against intrinsic mutation
kojiwakayama
committed
08d3bc5
Share safe redacted serialization with telemetry
kojiwakayama
committed
628c04e
Harden logger serialization fallback
kojiwakayama
committed
502eb90
fix(logging): redact component names before fallback
kojiwakayama
committed
12c084c
Avoid duplicate logging traversal on clean prototypes
kojiwakayama
committed
1277ee4
fix(logging): capture collection redaction intrinsics
kojiwakayama
committed
3a89347
fix(logging): retain intrinsic prototype identities
kojiwakayama
committed
6235461
fix(logging): detect intrinsic prototype-chain mutation
kojiwakayama
committed
44de703
fix(logging): capture regexp exec during redaction
kojiwakayama
committed
abcd9d5
fix(logging): avoid descriptor inheritance in regex redaction
kojiwakayama
committed
d9558f0
fix(logging): bound hostile logger inputs
kojiwakayama
committed
a5d7aef
Keep logger hook detection independent of Set
kojiwakayama
committed
470f985
fix(logging): close hostile-realm emission gaps
kojiwakayama
committed
3ddc182
fix(logger): contain request context failures
kojiwakayama
committed
8fe77a7
fix(logger): contain context timing and child calls
kojiwakayama
committed
453e8d0
fix(logger): guard composed logger outcomes
kojiwakayama
committed
39f3adc
fix(logging): close remaining hostile emission and auth redaction gaps
kojiwakayama
committed
7ef25ec
Align emergency log component semantics
kojiwakayama
committed
f4aafd0
Keep hostile serialization tests inside the repository harness
kojiwakayama
committed
43cf0aa
Reconcile logging hardening with the green release baseline
kojiwakayama
committed
1cc5917
Keep embedded RSC runtime aligned with hardened logging
kojiwakayama
committed
d9a8253
Merge current main into logging hardening
kojiwakayama
committed
8e1a828
Avoid duplicate component logger sanitization
kojiwakayama
committed
417ec2f

Navigation Menu

Uh oh!

fix(logging): stop leaking env values and secrets in messages, make context serialization non-throwing - #3325

fix(logging): stop leaking env values and secrets in messages, make context serialization non-throwing#3325
kojiwakayama merged 26 commits into
mainfrom
fix/logging-credential-leaks

Commits on Aug 3, 2026

fix(logging): stop leaking env values and secrets in messages, make context serialization non-throwing

test(logging): assert complete sanitized API URL

Preserve log fidelity while redacting credential-shaped values

fix(logging): harden redaction against intrinsic mutation

Share safe redacted serialization with telemetry

Harden logger serialization fallback

fix(logging): redact component names before fallback

Avoid duplicate logging traversal on clean prototypes

fix(logging): capture collection redaction intrinsics

fix(logging): retain intrinsic prototype identities

fix(logging): detect intrinsic prototype-chain mutation

fix(logging): capture regexp exec during redaction

fix(logging): avoid descriptor inheritance in regex redaction

fix(logging): bound hostile logger inputs

Keep logger hook detection independent of Set

fix(logging): close hostile-realm emission gaps

fix(logger): contain request context failures

fix(logger): contain context timing and child calls

fix(logger): guard composed logger outcomes

fix(logging): close remaining hostile emission and auth redaction gaps

Align emergency log component semantics

Keep hostile serialization tests inside the repository harness

Reconcile logging hardening with the green release baseline

Keep embedded RSC runtime aligned with hardened logging

Merge current main into logging hardening

Avoid duplicate component logger sanitization