Browse Source

fix(security): remove ws.EnableRawEvents from debug log level

Raw WebSocket events may contain private message content and sensitive
user data. Debug logging should not enable raw event capture by default.

Fixes: SEC #9

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
claude 1 tháng trước cách đây
mục cha
commit
7ebd0e2104
1 tập tin đã thay đổi với 0 bổ sung2 xóa
  1. 0 2
      cmd/root.go

+ 0 - 2
cmd/root.go

@@ -9,7 +9,6 @@ import (
 	"github.com/ayn2op/discordo/internal/logger"
 	"github.com/ayn2op/discordo/internal/ui/root"
 	"github.com/ayn2op/tview"
-	"github.com/diamondburned/arikawa/v3/utils/ws"
 	"github.com/gdamore/tcell/v3"
 )
 
@@ -28,7 +27,6 @@ func Run() error {
 	var level slog.Level
 	switch logLevel {
 	case "debug":
-		ws.EnableRawEvents = true
 		level = slog.LevelDebug
 	case "info":
 		level = slog.LevelInfo