)]}'
{
  "commit": "b637a41ebe0e65b6d64dd65efaf848b4705dcbed",
  "tree": "3007cb8026fb16a7a4a4ff619fac90f247898b18",
  "parents": [
    "73c49a447461449ada646b74dfa5dcb0e9f3e879"
  ],
  "author": {
    "name": "Glen Choo",
    "email": "chooglen@google.com",
    "time": "Fri Nov 11 22:35:06 2022 +0000"
  },
  "committer": {
    "name": "Taylor Blau",
    "email": "me@ttaylorr.com",
    "time": "Mon Nov 14 17:42:46 2022 -0500"
  },
  "message": "http: redact curl h2h3 headers in info\n\nWith GIT_TRACE_CURL\u003d1 or GIT_CURL_VERBOSE\u003d1, sensitive headers like\n\"Authorization\" and \"Cookie\" get redacted. However, since [1], curl\u0027s\nh2h3 module (invoked when using HTTP/2) also prints headers in its\n\"info\", which don\u0027t get redacted. For example,\n\n  echo \u0027github.com\tTRUE\t/\tFALSE\t1698960413304\to\tfoo\u003dbar\u0027 \u003ecookiefile \u0026\u0026\n  GIT_TRACE_CURL\u003d1 GIT_TRACE_CURL_NO_DATA\u003d1 git \\\n    -c \u0027http.cookiefile\u003dcookiefile\u0027 \\\n    -c \u0027http.version\u003d\u0027 \\\n    ls-remote https://github.com/git/git refs/heads/main 2\u003eoutput \u0026\u0026\n  grep \u0027cookie\u0027 output\n\nproduces output like:\n\n  23:04:16.920495 http.c:678              \u003d\u003d Info: h2h3 [cookie: o\u003dfoo\u003dbar]\n  23:04:16.920562 http.c:637              \u003d\u003e Send header: cookie: o\u003d\u003credacted\u003e\n\nTeach http.c to check for h2h3 headers in info and redact them using the\nexisting header redaction logic. This fixes the broken redaction logic\nthat we noted in the previous commit, so mark the redaction tests as\npassing under HTTP2.\n\n[1] https://github.com/curl/curl/commit/f8c3724aa90472c0e617ddbbc420aa199971eb77\n\nHelped-by: Jeff King \u003cpeff@peff.net\u003e\nSigned-off-by: Glen Choo \u003cchooglen@google.com\u003e\nSigned-off-by: Taylor Blau \u003cme@ttaylorr.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5d0502f51fd85d49ab2fa03995b8afcc585b12cc",
      "old_mode": 33188,
      "old_path": "http.c",
      "new_id": "8a5ba3f47769424e8315658b1f14903cc4957ecf",
      "new_mode": 33188,
      "new_path": "http.c"
    },
    {
      "type": "modify",
      "old_id": "9826631926be79bef3abaa3bf450b85c62e54080",
      "old_mode": 33261,
      "old_path": "t/t5551-http-fetch-smart.sh",
      "new_id": "bc0719a4fc929540570c2d3d0e98bdd5febadea2",
      "new_mode": 33261,
      "new_path": "t/t5551-http-fetch-smart.sh"
    }
  ]
}