Skip to content

fix: OpenAI sk-proj-* keys without T3BlbkFJ marker not detected #30

Description

@byapparov

Context

The OpenAI key regex in src/middleware/redactor.ts requires the internal T3BlbkFJ base64 marker. OpenAI has since issued new-format project keys (sk-proj-*) that don't contain this marker, so they pass through unredacted.

Location: src/middleware/redactor.ts, line 87

Proposal

Add a broader fallback pattern for sk-proj-[A-Za-z0-9_-]{48,} placed after the specific marked pattern to preserve specificity.

Priority

Medium — new OpenAI key format is increasingly common.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions