Context
PR #23 review flagged that PII inside escaped JSON strings isn't redacted.
Example: "metadata": "{\"email\":\"x@y.com\"}" — the email won't be caught because the redactor processes the outer string which contains escaped quotes, not parsed JSON.
Location: src/middleware/redactor.ts:78-129
Proposal
Add optional recursive JSON string inspection — when a string value looks like JSON (starts with { or [), attempt to parse and redact recursively.
Priority
Low — this is an edge case. Most tool outputs use proper nested objects, not stringified JSON.
Context
PR #23 review flagged that PII inside escaped JSON strings isn't redacted.
Example:
"metadata": "{\"email\":\"x@y.com\"}"— the email won't be caught because the redactor processes the outer string which contains escaped quotes, not parsed JSON.Location:
src/middleware/redactor.ts:78-129Proposal
Add optional recursive JSON string inspection — when a string value looks like JSON (
starts with {or[), attempt to parse and redact recursively.Priority
Low — this is an edge case. Most tool outputs use proper nested objects, not stringified JSON.