Explorar o código

[beeswax] Redact passwords from session properties

Jenny Kim %!s(int64=10) %!d(string=hai) anos
pai
achega
904da7de46
Modificáronse 1 ficheiros con 4 adicións e 0 borrados
  1. 4 0
      apps/beeswax/src/beeswax/api.py

+ 4 - 0
apps/beeswax/src/beeswax/api.py

@@ -810,6 +810,10 @@ def get_session(request):
 
   if session:
     properties = json.loads(session.properties)
+    # Redact passwords
+    for key, value in properties.items():
+      if 'password' in key.lower():
+        properties[key] = '*' * len(value)
   else:
     properties = {}