Skip to content

fix: OpenAI sk-proj-* keys without T3BlbkFJ marker not detected #30

Description

@byapparov

Context

The OpenAI key regex in src/middleware/redactor.ts requires the internal T3BlbkFJ base64 marker. OpenAI has since issued new-format project keys (sk-proj-*) that don't contain this marker, so they pass through unredacted.

Location: src/middleware/redactor.ts, line 87

Proposal

Add a broader fallback pattern for sk-proj-[A-Za-z0-9_-]{48,} placed after the specific marked pattern to preserve specificity.

Priority

Medium — new OpenAI key format is increasingly common.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions