-- `Url`, `AuthType`, `AccessId`, and `AccessKey` are now required to be printable ASCII, whether the effective value came from an env var override or from Command's/`manifest.json`'s configuration — a value containing anything else (an embedded newline, ANSI escape sequence, Unicode line/paragraph separator, bidirectional-override or zero-width character, etc.) is rejected with `InvalidClientConfigurationException` instead of being passed through. None of these parameters are legitimately anything but printable ASCII, and letting a non-ASCII value through risked forging extra lines or spoofed rendering in the log messages that echo the resolved value. This check runs both where the configured value is first read (before `BuildAkeylessConfiguration`'s own debug logging echoes it) and again on the final resolved value in `InitClient` (which may instead be an env var override), so a malicious/malformed value can't reach either log statement unvalidated.
0 commit comments