fix(DDE-365): security hardening — leak #1–#17 - #7

Open

nc-markovic wants to merge 21 commits into

mainfrom

fix/DDE-365-security-hardening

Commits on Jun 10, 2026

build(dependencies): update package-lock.json via npm audit fix
Zoran Markovic
committed
3e4e432
docs: add CLAUDE.md for project guidance and command reference
Zoran Markovic
committed
9038ccf
fix: leak #1 - sanitize URLs and reject embedded credentials in host
Zoran Markovic
committed
a9a1a59
fix: leak #2 - redact CLI params before logging session init
Zoran Markovic
committed
f586da6
fix: leak #1b - sanitize URLs in error messages
Zoran Markovic
committed
f6f12db
fix: leak #3 - strip Authorization on cross-origin redirect
Zoran Markovic
committed
18d4780
fix: leak #4 - summarize AEM response bodies in error details
Zoran Markovic
committed
11e4964
fix: leak #5 - deduplicate concurrent OAuth token mints
Zoran Markovic
committed
fe6ad4e
fix: leak #6 - use fresh AbortSignal on 401 retry
Zoran Markovic
committed
77427a6
fix: leak #7 - skip 401 retry on permission errors
Zoran Markovic
committed
016776b
fix: leak #8 - encode Basic auth credentials as Latin-1
Zoran Markovic
committed
ee30674
fix: leak #9 - skip 401 retry for Basic auth
Zoran Markovic
committed
6c2c571
fix: leak #10 - allow IMS endpoint override via AEM_IMS_URL
Zoran Markovic
committed
a647b0c

Commits on Jun 11, 2026