ソースを参照

fix(security): remove ws.EnableRawEvents from debug log level

Raw WebSocket events may contain private message content and sensitive
user data. Debug logging should not enable raw event capture by default.

Fixes: SEC #9

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
claude 1 ヶ月 前
コミット
7ebd0e2104
1 ファイル変更0 行追加2 行削除
  1. 0 2
      cmd/root.go

+ 0 - 2
cmd/root.go

@@ -9,7 +9,6 @@ import (
 	"github.com/ayn2op/discordo/internal/logger"
 	"github.com/ayn2op/discordo/internal/ui/root"
 	"github.com/ayn2op/tview"
-	"github.com/diamondburned/arikawa/v3/utils/ws"
 	"github.com/gdamore/tcell/v3"
 )
 
@@ -28,7 +27,6 @@ func Run() error {
 	var level slog.Level
 	switch logLevel {
 	case "debug":
-		ws.EnableRawEvents = true
 		level = slog.LevelDebug
 	case "info":
 		level = slog.LevelInfo