# fix\(redaction\): mask password and secret values in CLI messages \(\#361\) · lucenx/codexbar-plasma

[View on GitCafe](https://git.cafe/lucenx/codexbar-plasma/commit/5e1eceded19dc908e2dcc46dbb53f9799ea1ecf1)

Repository: [lucenx/codexbar-plasma](https://git.cafe/lucenx/codexbar-plasma)

Visibility: public

Requested revision: 5e1eceded19dc908e2dcc46dbb53f9799ea1ecf1

Requested commit: 5e1eceded19dc908e2dcc46dbb53f9799ea1ecf1

Commit: 5e1eceded19dc908e2dcc46dbb53f9799ea1ecf1

Tree: fa950863c694c8342412413af4c56c5aa8d924d8

Author: Simone

Committer: GitHub

## Message

```
fix(redaction): mask password and secret values in CLI messages (#361)

redactCredentialText covered authorization, bearer, cookie, API-key,
token, and sk- shapes only, so CLI errors such as 'login failed:
password=hunter2' reached the UI verbatim via boundedCliMessage and
Diagnostics. Extend the key pattern with password, secret,
private_key, and client_secret (with -/_/space variants), keeping the
existing quoted/JSON/escaped value handling.

Add QtTest coverage for bare, quoted, and JSON password/secret shapes.
```

## Parents

- [9b6a875d0fcd1e8b12dfda5681fdb4b042ac1a76](https://git.cafe/lucenx/codexbar-plasma/commit/9b6a875d0fcd1e8b12dfda5681fdb4b042ac1a76?format=markdown)

[Source at this commit](https://git.cafe/lucenx/codexbar-plasma/tree/5e1eceded19dc908e2dcc46dbb53f9799ea1ecf1?format=markdown)