fix(api): escape IDs in request paths, never follow redirects, hide secrets unless --show-secrets by priyanshu-plivo · Pull Request #173 · plivo/plivo-cli

fix(diagnose): refuse a blank, . or .. id before asking the assistant

Priyanshu (priyanshu-plivo)

committed

fdd5481

fix(multiparty): refuse a blank call id

Priyanshu (priyanshu-plivo)

committed

f43a6da

fix(sip): hide secrets in the -o json of SIP creates and writes

Priyanshu (priyanshu-plivo)

committed

ce2a4dd

fix(api): refuse a control character in the plivo api path

Priyanshu (priyanshu-plivo)

committed

be65b69

test(output): cover the agent lists in the secret-scrub exemption

Priyanshu (priyanshu-plivo)

committed

be5de99

fix(api): name where a redirect pointed, and a missing slash, in its hint

Priyanshu (priyanshu-plivo)

committed

890e3fb

fix(api): one rule for a URL on this machine, in any letter case

Priyanshu (priyanshu-plivo)

committed

760aef9

fix(redact): hide a whole secret value, whatever its type

Priyanshu (priyanshu-plivo)

committed

327dca7

fix(api): the internal build's event stream follows no redirect

Priyanshu (priyanshu-plivo)

committed

29c2fa0

fix(auth): escape the token id in the internal build's revoke path

Priyanshu (priyanshu-plivo)

committed

f28abf6

docs(api): say in plivo api help that agent flows are not scrubbed

Priyanshu (priyanshu-plivo)

committed

41e0df8

Merge remote-tracking branch 'origin/main' into fix/qa3-request-safety

Priyanshu (priyanshu-plivo)

committed

b6de878

Navigation Menu

Repository navigation

fix(api): escape IDs in request paths, never follow redirects, hide secrets unless --show-secrets - #173

fix(api): escape IDs in request paths, never follow redirects, hide secrets unless --show-secrets#173
Priyanshu (priyanshu-plivo) merged 23 commits into
mainfrom
fix/qa3-request-safety

Commits on Oct 23, 2026

fix(api): escape IDs in request paths and refuse blank, . and ..

fix(conferences): stop-record requires --yes

fix(api): never follow a redirect

fix(ask): refuse an assistant URL that is plain http to another host

feat(redact): Secrets hides credential values in a response body

fix(output): hide auth tokens and passwords unless --show-secrets

fix(multiparty): escape the participant ID in its request path

feat(api): PLIVO_API_URL sends requests to a server on this machine

fix(agents): leave agent flows out of the secret scrub

fix(api): keep commas literal in path parts

fix(api): the internal build's session client follows no redirect

Commits on Oct 27, 2026

fix(diagnose): refuse a blank, . or .. id before asking the assistant

fix(multiparty): refuse a blank call id

fix(sip): hide secrets in the -o json of SIP creates and writes

fix(api): refuse a control character in the plivo api path

test(output): cover the agent lists in the secret-scrub exemption

fix(api): name where a redirect pointed, and a missing slash, in its hint

fix(api): one rule for a URL on this machine, in any letter case

fix(redact): hide a whole secret value, whatever its type

fix(api): the internal build's event stream follows no redirect

fix(auth): escape the token id in the internal build's revoke path

docs(api): say in plivo api help that agent flows are not scrubbed

Merge remote-tracking branch 'origin/main' into fix/qa3-request-safety