mirror of
https://github.com/storytold/craft-libs.git
synced 2026-11-09 03:51:47 +00:00
ureq 3.5's Debug request log lists an allow-list of safe headers and leaves Authorization out; the unredacted wire is its Trace output (ureq-proto's log_data). `Http::with_github_token` now says so: apps should redact Bearer tokens or keep `ureq` and `ureq_proto` at Debug or quieter. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>