nickyleachandPaperclip 8fbc49de8b fix(server): mask a bearer glued to a neighbour by a hyphen or underscore ...

The candidate scanner found a maximal chain of base64url segments joined
by dots, then offered every window of three consecutive segments in the
chain. A neighbour word ending in a hyphen or underscore joined into the
chain's first segment with no dot to mark the join, so the bearer's own
first segment was never one of the chain's segments and the digest lookup
never ran on it.

The scanner now also offers a candidate that starts right after a hyphen
or an underscore inside the chain's first segment. Only the first segment
of a chain can carry this kind of glued prefix, since every later segment
starts right after a literal dot. The extra candidate count per chain is
bounded by the length of the first segment. The replacement now splices a
match that starts inside a segment, so the literal text in front of it
survives byte for byte.

Also remove the internal tracker references the four preceding commits on
this branch left in test names and comments.

Co-authored-by: Paperclip <noreply@paperclip.ing>

2026-09-16 08:16:36 +00:00

..

scripts

fix(server): bundle the vendored paperclip-runner instead of hand-mirroring its deps (#13121)

2026-09-09 16:38:17 -07:00

src

fix(server): mask a bearer glued to a neighbour by a hyphen or underscore

2026-09-16 08:16:36 +00:00

CHANGELOG.md

fix: bound workspace Git scans (#11572)

2026-08-17 22:11:30 -05:00

package.json

fix: preserve runner recovery, warm sessions, and task outcomes (#13338)

2026-09-12 19:41:15 -05:00

tsconfig.json

…

vitest.config.ts

fix(server): bundle the vendored paperclip-runner instead of hand-mirroring its deps (#13121)

2026-09-09 16:38:17 -07:00