mirror of
https://github.com/openai/codex.git
synced 2026-10-22 17:58:46 +00:00
viyatb-oai
82ef0672e3
## Why Credential substitution needs to authorize the destination and the original request before exposing host secrets. Project configuration must not redirect trusted credential policies, and older clients must reject scoped policies rather than silently apply unconditional injection. ## What changed - Add hook `schemes` and `ports` constraints and an exact whole-header `placeholder` for secret substitution. Require `network.mitm.version = 2` for these options in permission profiles. - Restrict placeholder substitution to HTTPS on port 443 and reject missing, mismatched, or duplicate placeholder headers. - Reject project changes to trusted MITM definitions and their inheritance chains. Allow self-contained project header-stripping policies only when no trusted MITM policy exists. - Reject ambiguous query values, value-constrained headers, and semicolon paths during authorization, and preserve case-sensitive extension methods. - Mark resolved secret headers sensitive, reject secret injection into `User-Agent`, restrict substitution headers, and limit secret files to 64 KiB. ## Testing Add regression coverage for scoped TOML resolution, legacy-format rejection, unknown fields, project policy restrictions, origin and placeholder denials, ambiguous request matching, secret redaction, and hook application after credential brokerage. GitOrigin-RevId: 78dc115ab6c88c9a734377626429bc4840731f89