Issues

• fix(secrets): stop quoted authorization/cookie values from redacting the rest of the line

  priority: lowtype: bug
  rabesss/impartus-cli#260 · Filter by author rabesss opened on Oct 2, 2026
  2

• test: deflake tuihost and player timing tests under -race and CPU contention

  area: testspriority: lowtype: chore
  rabesss/impartus-cli#259 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(secrets): merge overlapping ranges in replaceRawCredentialRanges

  priority: mediumtype: bugtype: security
  rabesss/impartus-cli#258 · Filter by author rabesss opened on Oct 2, 2026
  2

• fix(secrets): redact the whole value for backslash-escaped and nested quoted assignments

  priority: mediumtype: bugtype: security
  rabesss/impartus-cli#257 · Filter by author rabesss opened on Oct 2, 2026
  2

• fix(secrets): redact percent-encoded quoted values under keys with a non-ASCII prefix

  area: apiarea: clipriority: lowtype: bugtype: security
  rabesss/impartus-cli#256 · Filter by author rabesss opened on Oct 2, 2026
  1

• test(client): make the token-cache race tests catch a missing lock, and run -race in CI

  area: apiarea: ci-cdarea: testspriority: lowtype: chore
  rabesss/impartus-cli#255 · Filter by author rabesss opened on Oct 2, 2026
  2

• fix(events): scrub every string field in Writer.Emit, not only Error

  area: clipriority: mediumtype: security
  rabesss/impartus-cli#254 · Filter by author rabesss opened on Oct 2, 2026
  3

• fix(client): stop treating URL components over 64 KiB as bearer-carrying

  area: apiarea: downloaderpriority: lowtype: bug
  rabesss/impartus-cli#253 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(client): accept ';' in media query strings instead of silently dropping stream URLs

  area: apiarea: downloaderpriority: lowtype: bug
  rabesss/impartus-cli#252 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(client): keep redacted upstream error bodies when the bearer exceeds 512 bytes

  area: apiarea: downloaderpriority: mediumtype: bugtype: security
  rabesss/impartus-cli#251 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(downloader): support clear HLS playlists that have no EXT-X-KEY

  area: downloaderpriority: lowtype: bug
  rabesss/impartus-cli#250 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(secrets): scrub bare Bearer and separator-less header forms, Cookie2 and *_key assignments

  priority: mediumtype: bugtype: security
  rabesss/impartus-cli#249 · Filter by author rabesss opened on Oct 2, 2026
  1

• feat(client): option to refuse media requests to origins outside baseUrl/mediaOrigins

  area: configarea: downloaderpriority: mediumtype: featuretype: security
  rabesss/impartus-cli#248 · Filter by author rabesss opened on Oct 2, 2026
  1

• fix(secrets): recognise base64 and base64url spellings of the bearer in media URLs

  area: apiarea: downloaderpriority: mediumtype: bugtype: security
  rabesss/impartus-cli#247 · Filter by author rabesss opened on Oct 2, 2026
  1