vicrodh 4505312280 fix(security): remove hardcoded crypto seed from cmaf crate ...

Move the CMAF app seed from a hardcoded constant in qbz-cmaf to a
parameter passed by callers. The seed now lives in qbz-qobuz::auth
where other app-level constants are defined. This resolves CodeQL
alerts for hard-coded cryptographic values.

Also truncate session_id in logs to avoid cleartext logging of
sensitive session identifiers.

cc

2026-04-07 07:04:33 -06:00

..

src

fix(security): remove hardcoded crypto seed from cmaf crate

2026-04-07 07:04:33 -06:00

Cargo.toml

feat(cmaf): add qbz-cmaf crate with crypto module

2026-04-06 13:10:00 -06:00