diff options
| author | Danilo M. <danix@danix.xyz> | 2026-11-06 10:24:23 +0100 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-11-06 10:24:23 +0100 |
| commit | 4f1b534aec26e6f33e40f877282465f334c5f1fd (patch) | |
| tree | 0a1ccdf8182a0adbef4486888d077504690f7f4d /crypto-pgp/src | |
| parent | 9ec740b0c73e33485e1d754759de46aa99444733 (diff) | |
| download | HardenedPass-4f1b534aec26e6f33e40f877282465f334c5f1fd.tar.gz HardenedPass-4f1b534aec26e6f33e40f877282465f334c5f1fd.zip | |
fix(app): keep sensitive details out of debug logs
A log export makes logs easy to share, so audit what they hold. Turn off the sshj trace level, which dumps SSH packets in the clear, password authentication included; until now only the minimum priority of the Android logger kept it out. Drop entry names from commit and autofill match lines, and log only descriptive HTML attributes of form fields, since value and placeholder can hold what the user typed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'crypto-pgp/src')
0 files changed, 0 insertions, 0 deletions