Mathews-Tom 029e838bf0 fix(coding-agent): reject forged alias prefixes matching a regex pattern ...

Codex P2 finding on commit dff2a8d: #isGeneratedPlaceholder's forged-alias
guard only checked a dropped friendly-name prefix against exact previously-
discovered secret strings, recorded in whatever casing they first turned
up in. A case-insensitive (or other flag-variant) regex only ever records
the one casing it actually discovered, so a forged token wrapping a
differently-cased occurrence of that secret-shaped text around a real
bare-alias suffix matched neither exact-string check and sailed through
as an already-redacted placeholder, leaking the secret-shaped text
verbatim. The guard now also tests the dropped prefix directly against
every configured regex pattern.

2026-07-06 05:30:09 +05:30

..

index.ts

fix(coding-agent): reject unresolvable regex fallback and sanitize friendly-name collision check

2026-07-06 05:05:26 +05:30

obfuscator.ts

fix(coding-agent): reject forged alias prefixes matching a regex pattern

2026-07-06 05:30:09 +05:30

regex.ts

fix(coding-agent): fixes for PRs 80, 82, 85

2026-02-16 19:23:37 +01:00