3 ms·
This would be attractive as a console application. But having to upload a file with sensitive information to CF to have it sanitized makes less sense. Purpose
by nullindividual 3y ago
This would be attractive as a console application. But having to upload a file with sensitive information to CF to have it sanitized makes less sense.
Purpose and fit seems to be lost, here.
- jereees 3y agoFrom the article >The tool is built entirely on Cloudflare Workers, and all sanitization is done client-side which means Cloudflare never sees the full contents of the session token.
- eldridgea 3y agoLooks like it can be run locally ok with npm https://github.com/cloudflare/har-sanitizer https://github.com/cloudflare/har-sanitizer
- mdaniel 3y agoLooks like it only checks for authorization: redaction in the headers which is great, but continues to leak the authorization header in batched http calls for Google APIs IOW, a fine start, but one should still actually check har files for stanzas that are relevant to your authn/authz situation before sharing them with anyone
- NicoJuicy 3y agoYou can just deploy it to Cloudflare workers