Kind: Constant
Source: atloria-monorepo/apps/api/src/capture/capture.redact.ts
Server-side value redaction for captured steps (defense in depth).
The recorder client already redacts sensitive inputs at capture time (type=password, token/email/card patterns) — but we NEVER trust the client. Every stored step value is re-scanned here so a secret can never land in the database even if a tampered/old recorder sends one through.
Moat rule: the recipe (selectors + actions) is the asset — secret VALUES are not, and are actively harmful to keep. When in doubt, redact.
Was this page helpful?