harald/zeroclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3

Merge pull request #883 from agorevski/fix/cleartext-logging-sensitive-data

Browse source 
fix(security): prevent cleartext logging of sensitive data
This commit is contained in:
Alex Gorevski 2026-02-18 21:11:31 -08:00 • committed by GitHub
commit 52dc9fd9e9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
12 changed files with 112 additions and 79 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/tools/browser.rs
View file

@ -19,7 +19,7 @@ use tokio::process::Command;
use tracing::debug;
/// Computer-use sidecar settings.
#[derive(Debug, Clone)]
#[derive(Clone)]
pub struct ComputerUseConfig {
pub endpoint: String,
pub api_key: Option<String>,
@ -30,6 +30,20 @@ pub struct ComputerUseConfig {
pub max_coordinate_y: Option<i64>,
}
impl std::fmt::Debug for ComputerUseConfig {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
f.debug_struct("ComputerUseConfig")
.field("endpoint", &self.endpoint)
.field("api_key", &self.api_key.as_ref().map(|_| "[REDACTED]"))
.field("timeout_ms", &self.timeout_ms)
.field("allow_remote_endpoint", &self.allow_remote_endpoint)
.field("window_allowlist", &self.window_allowlist)
.field("max_coordinate_x", &self.max_coordinate_x)
.field("max_coordinate_y", &self.max_coordinate_y)
.finish()
}
}
impl Default for ComputerUseConfig {
fn default() -> Self {
Self {

5
src/tools/composio.rs
View file

@ -517,11 +517,10 @@ impl Tool for ComposioTool {
})?;
let params = args.get("params").cloned().unwrap_or(json!({}));
let connected_account_ref =
args.get("connected_account_id").and_then(|v| v.as_str());
let acct_ref = args.get("connected_account_id").and_then(|v| v.as_str());
match self
.execute_action(action_name, params, Some(entity_id), connected_account_ref)
.execute_action(action_name, params, Some(entity_id), acct_ref)
.await
{
Ok(result) => {