Symptom
redact_sensitive_string produces broken placeholders when a shorter secret value appears inside a placeholder written for a longer one.
Evidence what you'll see
- Redacted text contains nested or mangled <secret> tags
- Happens when a secret value is a word like 'secret'
- Reported on 0.13.3
Cause
Redaction replaced secrets one by one with plain string replace, so a later secret could match text inside a placeholder inserted earlier.
Fix steps
0 of 1 done
Your check marks stay in this browser only.
Verify the fix worked
- Redact a string with overlapping secret values and confirm each placeholder appears once and intact.
Sources and credit
Summarized in our own words from these public reports. Credit goes to their authors.
Provided as is, without warranty. Try changes in a non-production environment and back up first. Security-related steps: verify against the official docs. Terms · Request removal or attribution change
Hit an error we don't cover? Submit it