From 08b143a59da31bfe9c9fe8e9439b55d402342abf Mon Sep 17 00:00:00 2001
From: "sentry[bot]" <39604003+sentry[bot]@users.noreply.github.com>
Date: Wed, 3 Jun 2026 10:13:48 +0000
Subject: [PATCH] Fix runtime bounds error in hideTokens

---
 internal/app.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/internal/app.go b/internal/app.go
index 740daa1..dc4d5b9 100644
--- a/internal/app.go
+++ b/internal/app.go
@@ -110,11 +110,11 @@ func hideTokens(path string) string {
 	}
 
 	manyXes := strings.Repeat("X", 12)
-	tokenReplaced := pToken[:4] + manyXes
+	tokenReplaced := pToken[:min(4, len(pToken))] + manyXes
 	if pStud != "" {
-		return fmt.Sprintf("/?pStud=%s&pToken=%s", pStud[:4]+manyXes, tokenReplaced)
+		return fmt.Sprintf("/?pStud=%s&pToken=%s", pStud[:min(4, len(pStud))]+manyXes, tokenReplaced)
 	}
-	return fmt.Sprintf("/?pPers=%s&pToken=%s", pPers[:4]+manyXes, tokenReplaced)
+	return fmt.Sprintf("/?pPers=%s&pToken=%s", pPers[:min(4, len(pPers))]+manyXes, tokenReplaced)
 }
 
 func (a *App) Run() error {