13 lines
470 B
JavaScript
13 lines
470 B
JavaScript
'use strict';
|
|
|
|
// Xray has printed Reality private keys under both "Private key" and
|
|
// "PrivateKey". Never retain either form in job history or API responses.
|
|
function redactSecrets(value) {
|
|
return String(value || '')
|
|
.replace(/\bPrivate\s*Key\s*:\s*[^\s,;]+/gi, 'PrivateKey: [REDACTED]')
|
|
.replace(/\bNG_AGENT_KEY\s*=\s*[^\s,;]+/gi, 'NG_AGENT_KEY=[REDACTED]')
|
|
.replace(/\bBearer\s+[^\s,;]+/gi, 'Bearer [REDACTED]');
|
|
}
|
|
|
|
module.exports = { redactSecrets };
|