GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Redact Authorization extra headers from command errors by pick7 · Pull Request #2188 · gitpython-developers/GitPython

Conversation

@pick7

@pick7 pick7 commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Redact Authorization values passed through *.extraHeader configuration from logs and CommandError messages.
  • Preserve the configuration key and header name while replacing the credential value.
  • Add direct utility coverage and an end-to-end GitCommandError regression.

Fixes #1626.

Validation

  • .venv/bin/python -m pytest -o addopts= test/test_util.py test/test_git.py
  • .venv/bin/python -m ruff check git/util.py test/test_util.py test/test_git.py
  • .venv/bin/python -m ruff format --check git/util.py test/test_util.py test/test_git.py
  • .venv/bin/python -m mypy git/util.py

AI agent disclosure

This pull request was prepared and submitted by OpenAI Codex acting as an AI agent through the contributor account.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@pick7
fix: redact Authorization extra headers
5a53ae6
@Byron
Byron requested a review from Copilot July 26, 2026 04:05
Copilot started reviewing on behalf of Byron July 26, 2026 04:06
View session
Copilot AI reviewed Jul 26, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses credential leakage in GitPython error/log output by extending command-line redaction to cover http.*.extraHeader Authorization headers (e.g. when passed via -c http.extraHeader=Authorization: …), aligning behavior with existing URL user/pass redaction and fixing #1626.

Changes:

  • Extend remove_password_if_present() to redact *.extraHeader=Authorization: ... values while preserving the config key and header name.
  • Add direct unit coverage for remove_password_if_present() redaction of Authorization extra headers.
  • Add an end-to-end regression test ensuring GitCommandError messages do not include Authorization tokens.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
git/util.py Adds redaction logic for *.extraHeader=Authorization: arguments in remove_password_if_present().
test/test_util.py Adds a focused unit test covering Authorization extra header redaction.
test/test_git.py Adds a regression test asserting Authorization tokens are redacted from GitCommandError messages.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
Byron
Byron approved these changes Jul 26, 2026
View reviewed changes

@Byron Byron left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot, LGTM!

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@Byron
Byron merged commit 951cc44 into gitpython-developers:main Jul 26, 2026
48 checks passed

Uh oh!

There was an error while loading. Please reload this page.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@Byron Byron Byron approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Plaintext credential is exposed in CommandError if Authorization is passed in http.extraHeader

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@pick7 @Byron
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.