This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Improvements to clear-text logging query#243

Merged

max-schaefer merged 10 commits intogithub:masterfrom

max-schaefer:cve-2019-11250

Jul 7, 2020

Commits on Jun 30, 2020

Extend model of `glog` to also cover two API-compatible forks.
Max Schaefer
committed
Add HTTP-request headers as a source for clear-text logging.
Max Schaefer
committed
Add `mask*` as a heuristic name for an obfuscating function.
Max Schaefer
committed
Add more tests for clear-text logging.
Max Schaefer
committed

Commits on Jul 2, 2020

Treat non-sensitive header retrieval as a barrier.
Max Schaefer
committed
Model message components for `Fprintf` and friends more precisely.
Max Schaefer
committed
Teach `CleartextLogging` not to track through `error.Error()` and `fmt.Stringer.String()`.
Max Schaefer
committed
Make clear-text logging sources more precise.
Max Schaefer
committed
Teach clear-text logging query to ignore dummy passwords.
Max Schaefer
committed
Add change note.
Max Schaefer
committed