fix: prevent masking gaps in workflow command logs (#1384)

Mask partially escaped workflow command output and complete one-character values while preserving literal output and stream line endings.

Fixes: https://gitea.com/gitea/runner/issues/300
Reviewed-on: https://gitea.com/gitea/runner/pulls/1384
Reviewed-by: bircni <[email protected]>
This commit is contained in:
silverwind committed 2026-11-05 08:01:44 +00:00
1 parent ee03687688
commit 95ef17d022
6 files changed
+123 -20

No files matched your search

+1 -1
View File
@@ -960,7 +960,7 @@ func logRow(entry logging.Record) *runnerv1.LogRow {
// mask repairs the content first, so a secret the repair itself spells out is still caught.
func (r *Reporter) mask(content string) string {
return r.logReplacer.Replace(strings.ToValidUTF8(content, "?"))
return runner.MaskLog(strings.ToValidUTF8(content, "?"), r.logReplacer)
}
// AddMask deliberately leaves the process-wide masker alone. Its entries come from every live