mirror of
https://github.com/makeplane/plane.git
synced 2026-08-29 10:08:51 +02:00
- adapter/oauth.py: stop logging request headers on user-info fetch failure; they carry the Bearer access token (py/clear-text-logging-sensitive-data) - adapter/base.py: drop the email value from the invalid-email warning log (py/clear-text-logging-sensitive-data) - provider/oauth/github.py: stop logging organization id / user login on org-membership failure (py/clear-text-logging-sensitive-data) - editor custom-link: rewrite the C0-control strip regex with escaped, non-overlapping ranges instead of raw control bytes overlapping \s (js/overly-large-range); also fixes the file being detected as binary