Repository navigation

`SparkSubmitHook`: Mask `_mask_cmd` secrets in linear time - #71711

Merged

potiuk merged 17 commits into

apache:mainfrom

divyanshus2404:fix/redos-spark-mask-cmd

Oct 4, 2026

Commits on Aug 17, 2026
- fix(spark): replace ReDoS-vulnerable regex in _mask_cmd with linear-time token parser
  
  Divyanshu Singh
  authored and
  Divyanshu Singh
  committed
  e8ca2a9
- Merge branch 'main' into fix/redos-spark-mask-cmd
  divyanshus2404
  authored
  8b84444
Commits on Aug 25, 2026
- Add unit tests for SparkSubmitHook password masking
  divyanshus2404
  committed
  0dc1ddf
- Mask spark-submit secrets separated by tabs or repeated spaces
  divyanshus2404
  committed
  2fa05d9
- Keep _mask_cmd an instance method
  divyanshus2404
  committed
  0f4c36d
- Mask spark-submit secrets with a single linear-time pattern
  divyanshus2404
  committed
  ca82cac
- Merge branch 'main' into fix/redos-spark-mask-cmd
  divyanshus2404
  authored
  646d30a
Commits on Aug 27, 2026
- Describe _mask_cmd cost accurately rather than claiming linear time
  
  divyanshus2404
  authored and
  divyanshus2404
  committed
  5d58a97
Commits on Sep 6, 2026
- Stop masked quoted values from spanning newlines
  
  divyanshus2404
  and
  claude
  committed
  2d628a0
- Merge remote-tracking branch 'apache/main' into fix/redos-spark-mask-cmd
  divyanshus2404
  committed
  73c2b6d
Commits on Sep 22, 2026
- refactor: tokenise _mask_cmd to fix multi-key blind spot
  divyanshus2404
  committed
  0657dd8
- Merge branch 'main' into fix/redos-spark-mask-cmd
  divyanshus2404
  authored
  4cce959
- style: fix static check formatting errors
  
  divyanshus2404
  authored and
  Divyanshu Singh
  committed
  54b8891
Commits on Sep 24, 2026
- Mask Spark submit secrets exactly as before while scanning in linear time
  divyanshus2404
  committed
  f66e620
Commits on Oct 1, 2026
- Merge branch 'main' into fix/redos-spark-mask-cmd
  divyanshus2404
  authored
  32ac082
- fix(spark): extend quote limit to punctuation-terminated tokens
  divyanshus2404
  committed
  7233363
Commits on Oct 4, 2026
- Restore whitespace-only quote limit when masking Spark secrets
  divyanshus2404
  committed
  6f2239c

Navigation Menu

Repository navigation

`SparkSubmitHook`: Mask `_mask_cmd` secrets in linear time - #71711

`SparkSubmitHook`: Mask `_mask_cmd` secrets in linear time#71711
potiuk merged 17 commits into
apache:mainfrom
divyanshus2404:fix/redos-spark-mask-cmd

Commits on Aug 17, 2026

fix(spark): replace ReDoS-vulnerable regex in _mask_cmd with linear-time token parser

Merge branch 'main' into fix/redos-spark-mask-cmd

Commits on Aug 25, 2026

Add unit tests for SparkSubmitHook password masking

Mask spark-submit secrets separated by tabs or repeated spaces

Keep _mask_cmd an instance method

Mask spark-submit secrets with a single linear-time pattern

Merge branch 'main' into fix/redos-spark-mask-cmd

Commits on Aug 27, 2026

Describe _mask_cmd cost accurately rather than claiming linear time

Commits on Sep 6, 2026

Stop masked quoted values from spanning newlines

Merge remote-tracking branch 'apache/main' into fix/redos-spark-mask-cmd

Commits on Sep 22, 2026

refactor: tokenise _mask_cmd to fix multi-key blind spot

Merge branch 'main' into fix/redos-spark-mask-cmd

style: fix static check formatting errors

Commits on Sep 24, 2026

Mask Spark submit secrets exactly as before while scanning in linear time

Commits on Oct 1, 2026

Merge branch 'main' into fix/redos-spark-mask-cmd

fix(spark): extend quote limit to punctuation-terminated tokens

Commits on Oct 4, 2026

Restore whitespace-only quote limit when masking Spark secrets