# fix\(privacy\): redact complete shared labels containing paths \(\#597\) · lucenx/codexbar-plasma

[View on GitCafe](https://git.cafe/lucenx/codexbar-plasma/commit/124cf0dd82a08961e84d398566fb06c17abfae4d)

Repository: [lucenx/codexbar-plasma](https://git.cafe/lucenx/codexbar-plasma)

Visibility: public

Requested revision: 124cf0dd82a08961e84d398566fb06c17abfae4d

Requested commit: 124cf0dd82a08961e84d398566fb06c17abfae4d

Commit: 124cf0dd82a08961e84d398566fb06c17abfae4d

Tree: bcbc3c9d6e21fad7b1c56797ed365ef3cf7675c8

Author: Simone

Committer: GitHub

## Message

```
fix(privacy): redact complete shared labels containing paths (#597)

* fix(privacy): redact complete shared labels containing paths

Whitespace was treated as the end of a filesystem path, allowing names
such as /a b to export the remaining b after the redaction marker.
Redact the complete label before URL filtering and preserve ordinary
namespaced model IDs and measured aggregate amounts.

Add snapshot-level regression cases for Unix, quoted, file-URL, tilde and
Windows paths with spaces. The six cases fail before the fix and pass
afterward, alongside the existing native image/text export checks.

Documentation impact: update the Share usage guide and Unreleased
security changelog. TODO is unaffected because no parity item is
completed. Configuration, translations and CLI contracts are unchanged.

* fix(privacy): preserve label text around web URLs

Apply HTTP(S) URL filtering before the filesystem-path check so URL
slashes cannot hide the complete shared model label. Keep file URLs
subject to whole-label redaction and cover labels mixing web URLs and
actual paths.

The HTTP and HTTPS regression cases failed before this change. All 33
ShareUsage tests now pass, including the six path-with-spaces cases.
Documentation impact: existing usage and security changelog descriptions
remain accurate; no configuration, translation or parity TODO changes.
```

## Parents

- [cecd5030349c73d9748b94d3110d4958b806ca0d](https://git.cafe/lucenx/codexbar-plasma/commit/cecd5030349c73d9748b94d3110d4958b806ca0d?format=markdown)

[Source at this commit](https://git.cafe/lucenx/codexbar-plasma/tree/124cf0dd82a08961e84d398566fb06c17abfae4d?format=markdown)