bambuddy

public_git/bambuddy

Fork 0

mirror of https://github.com/maziggy/bambuddy.git synced 2026-10-04 05:01:37 +02:00

Commit Graph

Author	SHA1	Message	Date
maziggy	3da4eee16e	Bound the scheme repetition in the log credential-redaction pattern. As an unbounded repetition the match was quadratic in the subject length: on a run of scheme-legal characters the engine restarted at every offset and consumed to the end before failing to find "://". ffmpeg echoes the configured camera URL into its stderr and the whole blob reaches the pattern before any truncation, so the subject length is attacker-influenced.	2026-08-02 11:17:24 +02:00
maziggy	e325948dcc	Security hardening (maziggy/bambuddy-security #N) Subprocess output and user-supplied URLs are scrubbed of credentials before they reach the application log. Adds a shared redaction helper in core/logging_filters and routes the existing support-bundle sanitizer through the same pattern.	2026-07-29 12:36:17 +02:00

Author

SHA1

Message

Date

maziggy

3da4eee16e

Bound the scheme repetition in the log credential-redaction pattern. As an

unbounded repetition the match was quadratic in the subject length: on a run
of scheme-legal characters the engine restarted at every offset and consumed
to the end before failing to find "://". ffmpeg echoes the configured camera
URL into its stderr and the whole blob reaches the pattern before any
truncation, so the subject length is attacker-influenced.

2026-08-02 11:17:24 +02:00

maziggy

e325948dcc

Security hardening (maziggy/bambuddy-security #N)

Subprocess output and user-supplied URLs are scrubbed of credentials
before they reach the application log. Adds a shared redaction helper in
core/logging_filters and routes the existing support-bundle sanitizer
through the same pattern.

2026-07-29 12:36:17 +02:00