{"version":"2.1.248","anchor":"wider-secret-redaction","canonical_anchor":"wider-secret-redaction","heading":"Wider secret redaction","tier":"notice","area":"Redaction","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/wider-secret-redaction","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Wider secret redaction\n\nSecret redaction now also catches connection strings, cookies, session ids, bearer tokens and passwords.\n\n**What**\n\nThe pattern that hides credentials before text leaves your machine now also matches connection strings, cookies, session ids, bearer tokens, passwords and a family of `*_key` names, on top of the api key, secret and token forms it already caught.\n\n**Details**\n\n- A companion pattern recognises text that is already redacted, so `[REDACTED]` markers and `Bearer`\/`Basic` prefixes are not processed twice.\n\n**Evidence**\n\n`connection[_-]?string`\n\n- Area: Redaction\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}