highperfocused/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-26 12:35:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

refactor(config): normalize whitelist suffixes once

Browse Source
This commit is contained in:
Gustavo Madeira Santana
2026-02-15 10:18:19 -05:00
parent bfa9229c6e
commit a32a240d40
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/config/schema.hints.ts
View File

@@ -101,14 +101,19 @@ const SENSITIVE_KEY_WHITELIST_SUFFIXES = [
"tokencount",
"tokenlimit",
"tokenbudget",
"passwordfile",
"passwordFile",
] as const;
const NORMALIZED_SENSITIVE_KEY_WHITELIST_SUFFIXES = SENSITIVE_KEY_WHITELIST_SUFFIXES.map((suffix) =>
suffix.toLowerCase(),
);
const SENSITIVE_PATTERNS = [/token$/i, /password/i, /secret/i, /api.?key/i];
export function isSensitiveConfigPath(path: string): boolean {
const lowerPath = path.toLowerCase();
const whitelisted = SENSITIVE_KEY_WHITELIST_SUFFIXES.some((suffix) => lowerPath.endsWith(suffix));
const whitelisted = NORMALIZED_SENSITIVE_KEY_WHITELIST_SUFFIXES.some((suffix) =>
lowerPath.endsWith(suffix),
);
return !whitelisted && SENSITIVE_PATTERNS.some((pattern) => pattern.test(path));
}