Skip to content

Treat joined totp and 2fa code names as sensitive - #90

Merged
wolfiesch merged 1 commit into
mainfrom
fix/sensitive-field-totp-joined
Oct 27, 2026
Merged

wolfiesch merged 1 commit into
mainfrom
fix/sensitive-field-totp-joined

Conversation

@wolfiesch

Copy link
Copy Markdown
Owner

Follow-up to #89. Whole-token matching for totp and 2fa stopped catching all-lowercase joined names such as totpcode and 2fatoken. They are now matched as substrings, along with totptoken. bun run extension:check passes.

@wolfiesch
wolfiesch merged commit 052e093 into main Oct 27, 2026
9 checks passed
@wolfiesch
wolfiesch deleted the fix/sensitive-field-totp-joined branch October 27, 2026 11:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant