From 79fbcb3ec40ba919d72fbe2d17e0392e7b5dfa4a Mon Sep 17 00:00:00 2001 From: Michael Velbaum Date: Sun, 28 Dec 2025 15:32:54 +0200 Subject: [PATCH] fix(logging): quote OAuth account field Use strconv.Quote when embedding the OAuth account in debug logs so unexpected characters (e.g. quotes) can't break key=value parsing. --- sdk/cliproxy/auth/conductor.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/cliproxy/auth/conductor.go b/sdk/cliproxy/auth/conductor.go index df3d8b3e..281216ed 100644 --- a/sdk/cliproxy/auth/conductor.go +++ b/sdk/cliproxy/auth/conductor.go @@ -1655,7 +1655,7 @@ func formatOauthIdentity(auth *Auth, provider string, accountInfo string) string if accountInfo == "" { return strings.Join(parts, " ") } - return strings.Join(parts, " ") + " account=\"" + accountInfo + "\"" + return strings.Join(parts, " ") + " account=" + strconv.Quote(accountInfo) } // InjectCredentials delegates per-provider HTTP request preparation when supported.