# NousResearch/hermes-agent · Redacting proxy credentials from Telegram adapter logs

## Open now

- 1 issue, 2 PRs open on GitHub.
- #58994: Telegram adapter logs HTTPS_PROXY URL with embedded credentials at INFO
- PR #59647: fix(security): redact credentials in HTTPS_PROXY URL log line (#58994)
- PR #88476: fix(security): safe_url_for_log fails open on schemeless proxy URLs (#58994)

These issues and pull requests concern a security problem where the Telegram adapter logs proxy URLs with embedded credentials at INFO level. The work involves identifying the issue and proposing or applying fixes to redact those credentials, including edge cases around schemeless proxy URLs.

## TL;DR

- 6 member(s): 1 open issue(s), 0 closed issue(s), 2 open PR(s), 0 merged PR(s), 3 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.33`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #58994: Telegram adapter logs HTTPS_PROXY URL with embedded credentials at INFO

## Prior & competing PRs

- **#58999: fix(telegram): redact proxy credentials in logs**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`
- **#59033: fix(telegram): redact proxy credentials in INFO log line (#58994)**. closed without merge
  - maintainer direction: category `duplicate_of`; implication `duplicate`; refs `#58999`, `#58994`, `#49107`
- **#59119: fix: redact proxy credentials from Telegram adapter INFO log**. closed without merge
  - maintainer direction: category `duplicate_of`; implication `duplicate`; refs `#58999`, `#58994`
- **#59647: fix(security): redact credentials in HTTPS_PROXY URL log line (#58994)**. open
  - maintainer direction: category `duplicate_of`; implication `duplicate`; refs `#58994`, `#71717`, `#58999`, `#49107`
  - files: `plugins/platforms/discord/adapter.py`, `plugins/platforms/matrix/adapter.py`, `plugins/platforms/telegram/adapter.py`, `tests/gateway/test_proxy_url_redaction.py`
- **#88476: fix(security): safe_url_for_log fails open on schemeless proxy URLs (#58994)**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`
  - files: `gateway/platforms/base.py`, `gateway/run.py`, `plugins/platforms/discord/adapter.py`, `plugins/platforms/matrix/adapter.py`, `plugins/platforms/telegram/adapter.py`, `tests/gateway/test_proxy_url_redaction.py`, `tools/send_message_tool.py`

## Fix status

- No merged fix on record.
- Subsystem: `gateway`