Ravi Tharuma 7ae17168db fix(security): decouple request PII redaction from injection mode (#8102) ...

* fix(security): decouple request PII redaction from injection mode

PII_REDACTION_ENABLED now rewrites request PII independently of
INPUT_SANITIZER_MODE, so the enterprise recipe (MODE=block + PII on)
actually redacts. Also cover Responses API string input/prompt shapes
and correct docs that claimed MODE=redact strips injection text.

Refs: #8092 #8093 #8094 #8096 #8097

* test(security): drop no-explicit-any in sanitizer unit tests

Unblocks CI lint/quality ratchet on the PII redaction PR by typing
chat-like payloads instead of casting to any.

---------

Co-authored-by: Ravi Tharuma <RaviTharuma@users.noreply.github.com>

2026-07-22 17:38:20 -03:00

..

BAN_DETECTION.md

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

CLI_TOKEN.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

COMPLIANCE.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

CORS.md

feat(api): add Vary: Accept-Encoding to token-authenticated /v1* responses (#6737) (#7217)

2026-07-17 10:39:58 -03:00

EGRESS_POLICY.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

ERROR_SANITIZATION.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

GUARDRAILS.md

fix(security): decouple request PII redaction from injection mode (#8102)

2026-07-22 17:38:20 -03:00

meta.json

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

MITM-TPROXY-DECRYPT.md

feat(mitm): root-CA + per-host leaf certs for AgentBridge static server (#6684) (#7731)

2026-07-19 14:37:27 -03:00

PUBLIC_CREDS.md

Release v3.8.40

2026-06-29 08:40:06 -03:00

ROUTE_GUARD_TIERS.md

feat: narrow mcp:connect scope + per-key HTTP tool-scope binding (#7895) (#7967)

2026-07-22 02:34:54 -03:00

SOCKET_DEV_FINDINGS.md

Release v3.8.6 (#2804)

2026-05-29 12:44:29 -03:00

STEALTH_GUIDE.md

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

SUPPLY_CHAIN.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00