fix(camera): drop debug console.log(c) leaking the camera password to logs
Build desktop / desktop (push) Successful in 4m39s
Build & push images / images (push) Successful in 2m49s
CI / check (push) Successful in 41s

The Hikvision driver's create() had a leftover `console.log(c)` that dumped the
ENTIRE camera config — including the plaintext `password` — to stdout every time
the adapter was built, on every request that resolves a camera. That puts a device
credential in the logs (which get shipped/cached/read — the booth operator is the
adversary). Removed. Swept the rest of the shipped source: no other console.* leaks.
This commit is contained in:
2026-06-27 14:13:45 +02:00
parent 1ea1aa4189
commit 916c147b4d
+3 -5
View File
@@ -236,14 +236,12 @@ export const hikvisionDriver: CameraDriver = {
configFields: [...hikvisionConfigFields, ...alarmPushFields], configFields: [...hikvisionConfigFields, ...alarmPushFields],
// ISAPI channel id: <channel><stream>, e.g. ch1 main = 101, ch1 sub = 102, ch2 main = 201. // ISAPI channel id: <channel><stream>, e.g. ch1 main = 101, ch1 sub = 102, ch2 main = 201.
// stream 1 → "01" (main), 2 → "02" (sub). // stream 1 → "01" (main), 2 → "02" (sub).
create: (c) => { create: (c) =>
console.log(c); new HttpCamera(
return new HttpCamera(
"hikvision", "hikvision",
c, c,
(ch, stream) => `/ISAPI/Streaming/channels/${ch}0${stream}/picture`, (ch, stream) => `/ISAPI/Streaming/channels/${ch}0${stream}/picture`,
); ),
},
}; };
export const dahuaDriver: CameraDriver = { export const dahuaDriver: CameraDriver = {