2 commits

Author	SHA1	Message	Date
russell@unturf.com	93c9c175d4	undf: assign UNDF-2026-000001125 to mercurial-0001, stamp patches	2026-04-03 11:04:23 -04:00
russell@unturf.com	409d0f1907	imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG ... ffmpeg-0004 (MOAD-0004 / CWE-312): libavformat/http.c http_connect() logs the full HTTP request at AV_LOG_DEBUG, including the Authorization: Basic header with base64-encoded user:pass. Fix: produce a sanitized copy before av_log, replacing auth header values with ***REDACTED***. Wire bytes unchanged. 22/22 unit tests PASS. FFmpeg MOADs 0002/0003/0005: CLEAN. ImageMagick MOADs 0002-0005: CLEAN.	2026-03-31 21:10:24 -04:00