3 people 66e834d9d7 fix(wasm): run leak scan before credential injection in tools wrapper (#791) ...

* fix(wasm): run leak scan before credential injection in tools wrapper

The tools WASM wrapper runs the LeakDetector on HTTP request headers
AFTER inject_host_credentials() has already substituted real secrets
(e.g., xoxb- Slack bot tokens). This causes the leak detector to
flag the tool's own legitimate outbound API calls as secret exfiltration.

Move the scan to run on raw_headers before any credential injection,
matching the fix already applied to the channels wrapper in #421.

Fixes the same class of bug as #421 (which only fixed channels/wasm/wrapper.rs).

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* perf: inline leak scan to avoid Vec allocation on every HTTP request

Address review feedback: instead of cloning all header keys/values into
a Vec to pass to scan_http_request(), iterate over raw_headers directly
using scan_and_clean(). This also provides more specific error messages
(URL vs header vs body).

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* style: fix cargo fmt formatting in leak scan loop

Co-Authored-By: Claude Opus 4.6 <[email protected]>

---------

Co-authored-by: Claude Opus 4.6 <[email protected]>

2026-03-10 11:06:53 -07:00

..

allowlist.rs

style: fix rustfmt formatting from PR #137

2026-02-18 11:56:13 -08:00

capabilities_schema.rs

feat: WASM extension versioning with WIT compat checks (#592)

2026-03-06 04:38:07 +00:00

capabilities.rs

Feat: add rate limiting for built-in tools (closes #171) (#276)

2026-02-21 14:39:53 +04:00

credential_injector.rs

fix: batch of quick fixes (#417, #338, #330, #358, #419, #344) (#428)

2026-03-01 09:01:07 +00:00

error.rs

feat(wasm): lazy schema injection on WASM tool errors (#638)

2026-03-09 11:27:46 -07:00

host.rs

Add WASM sandbox secure API extension

2026-02-02 23:22:52 -08:00

limits.rs

Add Telegram webhook support with credential injection

2026-02-04 21:19:42 -08:00

loader.rs

feat(setup): quick onboarding, preserve .env vars, clean up boot logging (#821)

2026-03-10 05:02:33 +00:00

mod.rs

feat: WASM channel attachments with LLM pipeline integration (#596)

2026-03-07 18:01:40 +00:00

rate_limiter.rs

Feat: add rate limiting for built-in tools (closes #171) (#276)

2026-02-21 14:39:53 +04:00

runtime.rs

fix(wasm): use per-engine cache dirs on Windows to avoid file lock error (#624)

2026-03-06 23:31:58 +00:00

storage.rs

feat: WASM extension versioning with WIT compat checks (#592)

2026-03-06 04:38:07 +00:00

wrapper.rs

fix(wasm): run leak scan before credential injection in tools wrapper (#791)

2026-03-10 11:06:53 -07:00