fix(redact): close the Bearer smuggling hole in the colon rule - #1040

Merged

lidge-jun merged 15 commits into

devfrom

codex/stack-07-bearer-smuggling

Aug 5, 2026

Commits on Aug 5, 2026

fix(redact): close the Bearer smuggling hole in the colon rule
lidge-jun
committed
1bf8f34
fix(redact): replace the layered regexes with one explicit decision
lidge-jun
committed
b3289a2
fix(redact): rescan preserved remainders and normalize colon confusables
lidge-jun
committed
c67bb13
fix(redact): drop the preserved-remainder exception entirely
lidge-jun
committed
7031ce7
fix(redact): canonicalize label candidates instead of listing characters
lidge-jun
committed
9d0b5a9
fix(redact): fold by code point and widen the confusable table
lidge-jun
committed
0082c4b
fix(redact): recognize quoted credential keys in serialized objects
lidge-jun
committed
0e29a1b
fix(redact): require a structural terminator, and cover non-colon framings
lidge-jun
committed
ea4bc7f
fix(redact): decide early termination by the label, and bound the framings
lidge-jun
committed
e56bcbc
fix(redact): stop trying to stop early
lidge-jun
committed
4860f58
fix(redact): apply the same blunt policy to XML
lidge-jun
committed
1ff2783
fix(redact): XML has no line discipline to borrow either
lidge-jun
committed
e74c137
fix(redact): decode serialization escapes into the matching view
lidge-jun
committed
5a44743
fix(redact): make decoding one-way, and fix the supplementary offset map
lidge-jun
committed
a1bdb65
fix(redact): decode multi-unit escapes, and stop promising an entity table
lidge-jun
committed
7336b54