Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: EasyPost/easypost-java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: EasyPost/easypost-java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: sec-786-redact-hook-api-key
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 2 commits
  • 5 files changed
  • 2 contributors

Commits on Oct 3, 2026

  1. fix: redact API key in headers passed to request/response hooks 

    Hooks received the same headers map used to build the request, including
the full `Authorization: Bearer <api key>` value. A hook that logs or
exports its event would leak the key.

Hooks now get their own copy of the headers with the API key redacted to
its last four characters (e.g. `Bearer ****WXYZ`). Keys of 8 characters
or fewer are fully masked. The outbound request still sends the full key.

Fixes SEC-786.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
    @msuitcase @claude
    msuitcase and claude committed Oct 3, 2026
    Configuration menu
    Copy the full SHA
    70be1a7 View commit details
    Browse the repository at this point in the history

  2. docs: add CHANGELOG entry for hook API key redaction 

    Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
    @msuitcase @claude
    msuitcase and claude committed Oct 3, 2026
    Configuration menu
    Copy the full SHA
    9c8c3be View commit details
    Browse the repository at this point in the history
Loading