forks/go-ethereum
1
0
Fork 1
mirror of https://github.com/ethereum/go-ethereum.git synced 2026-07-26 22:56:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #50 from roseteromeo56/alert-autofix-11

Browse source 
Potential fix for code scanning alert no. 11: Clear-text logging of sensitive information
This commit is contained in:
Romeo Rosete 2025-05-21 11:55:41 -04:00 committed by GitHub
commit 45512ca857
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
signer/core/cliui.go
View file

@ -22,6 +22,7 @@ import (
"encoding/json"
"fmt"
"os"
"regexp"
"strings"
"sync"
@ -33,8 +34,9 @@ import (
// sanitizeMessage redacts sensitive information from the input string.
func sanitizeMessage(message string) string {
// Example: Replace occurrences of "password: <value>" with "password: [REDACTED]"
return strings.ReplaceAll(message, "password:", "password: [REDACTED]")
// Use regular expressions to redact sensitive information.
re := regexp.MustCompile(`(?i)(password\s*:\s*\S+|private\s*key\s*:\s*\S+|email\s*:\s*\S+@\S+)`)
return re.ReplaceAllString(message, "[REDACTED]")
}
type CommandlineUI struct {