Mathews-Tom 1da33c74cf fix(secrets): cover regex-discovered secrets and preserve full cut-match length ...

Two follow-up fixes on the friendly-placeholder alias check:

- isGeneratedPlaceholder() now also rejects a forged prefix that
  contains any regex-discovered secret's value (tracked in
  #obfuscateMappings), not just statically configured plain secrets,
  closing the same smuggling path for type: "regex" entries.
- The regex match collector's placeholder-prefix clamp branch now
  keeps the full original match length for the short-match guard
  instead of the clamped prefix's shorter length, so a full-size
  match whose wholly-outside prefix is under MIN_OBFUSCATE_SECRET_LEN
  is no longer wrongly skipped as noise.

2026-07-04 07:33:17 +05:30

..

index.ts

fix(secrets): ignore replace-shadowed obfuscate entries in placeholder-key need

2026-06-24 02:02:41 +05:30

obfuscator.ts

fix(secrets): cover regex-discovered secrets and preserve full cut-match length

2026-07-04 07:33:17 +05:30

regex.ts

fix(coding-agent): fixes for PRs 80, 82, 85

2026-02-16 19:23:37 +01:00