Fix critical vulnerabilities: Remove sensitive logging, add JS validation, add security dependencies

Co-authored-by: animator <615622+animator@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2025-10-11 18:57:30 +00:00
parent f119168f87
commit 5c117fe82f
4 changed files with 76 additions and 11 deletions

View File

@@ -221,8 +221,6 @@ Future<HttpRequestModel> handleAuth(
}
}
debugPrint(res.$1.credentials.accessToken);
// Add the access token to the request headers
updatedHeaders.add(
NameValueModel(
@@ -238,7 +236,6 @@ Future<HttpRequestModel> handleAuth(
oauth2Model: oauth2,
credentialsFile: credentialsFile,
);
debugPrint(client.credentials.accessToken);
// Add the access token to the request headers
updatedHeaders.add(
@@ -250,12 +247,10 @@ Future<HttpRequestModel> handleAuth(
updatedHeaderEnabledList.add(true);
break;
case OAuth2GrantType.resourceOwnerPassword:
debugPrint("==Resource Owner Password==");
final client = await oAuth2ResourceOwnerPasswordGrantHandler(
oauth2Model: oauth2,
credentialsFile: credentialsFile,
);
debugPrint(client.credentials.accessToken);
// Add the access token to the request headers
updatedHeaders.add(