Function sanitizeForSlack

server/src/utils/posthog.ts:216–221

* Strip connection strings, credentials, and other secrets from error messages * before forwarding to Slack.

(msg: string)

 * before forwarding to Slack.
 */
function sanitizeForSlack(msg: string): string {
  return msg
    .replace(/\b\w+:\/\/[^\s]+@[^\s]+/g, '[REDACTED_URL]')
    .replace(/password[=:]\s*\S+/gi, 'password=[REDACTED]')
    .replace(/\b(sk|pk|api[_-]?key|secret|token)[_-]?\w*[=:]\s*\S+/gi, '$1=[REDACTED]');
}

/**
 * Bridge logger.error() to the #aao-errors Slack channel via notifySystemError.