jamesfredley opened a new pull request, #15810: URL: https://github.com/apache/grails-core/pull/15810
## Summary - mask excluded exception request parameters case-insensitively - keep exact-name matching only, so substrings like `apiToken` are not masked by an excluded `token` entry - update logging documentation and Spring configuration metadata to describe the matching behavior ## Verification - `./gradlew.bat --no-daemon --no-parallel --max-workers=1 :grails-web-mvc:test --tests "org.grails.web.errors.GrailsExceptionResolverSpec"` - `./gradlew.bat --no-daemon --no-parallel --max-workers=1 :grails-web-mvc:check :grails-web-core:check` - `./gradlew.bat --no-daemon --no-parallel --max-workers=1 :grails-doc:assemble` - Review gate: Oracle GREEN, Codex GREEN ## Notes - Follow-up from audit `FINDING-007`. - Full aggregate verification was attempted locally, but Docker/Testcontainers is unavailable on this machine and the run hit unrelated GSP example integration failures that require Docker. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
