forks/go-ethereum
1
0
Fork 1
mirror of https://github.com/ethereum/go-ethereum.git synced 2026-07-25 14:16:44 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Potential fix for code scanning alert no. 11: Clear-text logging of sensitive information

Browse source 
Romeo Rosete

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Romeo Rosete 2025-05-21 11:52:07 -04:00 committed by GitHub
parent de7c698419
commit cc4031775c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
signer/core/cliui.go
View file

@ -22,6 +22,7 @@ import (
"encoding/json"
"fmt"
"os"
"regexp"
"strings"
"sync"
@ -33,8 +34,9 @@ import (
// sanitizeMessage redacts sensitive information from the input string.
func sanitizeMessage(message string) string {
// Example: Replace occurrences of "password: <value>" with "password: [REDACTED]"
return strings.ReplaceAll(message, "password:", "password: [REDACTED]")
// Use regular expressions to redact sensitive information.
re := regexp.MustCompile(`(?i)(password\s*:\s*\S+|private\s*key\s*:\s*\S+|email\s*:\s*\S+@\S+)`)
return re.ReplaceAllString(message, "[REDACTED]")
}
type CommandlineUI struct {