brave-core

Files

T

Dev 36605e97e0 fix: remove secret key material from log messages (#34265 )

* fix: remove secret key material from log messages

CRITICAL: Several VLOG(1) statements were logging plaintext secret
key material that could be captured via adb logcat (Android) or
Console.app (iOS):

- browser/android/brave_sync_worker.cc: Sync recovery phrase (seed
  words) and hex-encoded sync seed logged on parse failure
- ios/browser/api/sync/brave_sync_worker.cc: Same issue on iOS
- components/brave_wallet/browser/filecoin_keyring.cc: Import payload
  containing Filecoin private key logged on JSON parse failure

These log statements would expose the user's master sync secret or
private key material to any process with log access. The fix removes
the secret material from all log messages while preserving the
diagnostic error information.

* fix: also redact plaintext sync code from LOG(ERROR) in SetSyncCode (iOS) and SaveCodeWords (Android)

* fix: apply clang-format to sync worker files

2026-03-02 10:51:59 +00:00

app

[iOS] Add feature flag for adjusting default iOS user agent type (#33953 )

2026-02-19 09:23:51 -05:00

brave-ios

[iOS] Open playlist item in a private tab if PBO is enabled (#34297 )

2026-02-27 17:28:37 -05:00

browser

fix: remove secret key material from log messages (#34265 )

2026-03-02 10:51:59 +00:00

components

[CodeHealth] Use base::DictValue/base::ListValue - Part II (#33615 )