Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adds ssn to the sensitive parameters list #3733

Merged
merged 2 commits into from
Apr 12, 2024
Merged

adds ssn to the sensitive parameters list #3733

merged 2 commits into from
Apr 12, 2024

Conversation

saikumar9
Copy link
Member

@saikumar9 saikumar9 commented Apr 11, 2024

PR Checklist

Please check if your PR fulfills the following requirements

  • The title follows our guidelines
  • Tests for the changes have been added (for bugfixes/features)

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature (requires Feature flag)
  • Data fix or migration (inert code, no impact until run)
  • Refactoring (no functional changes, no API changes)
  • Build related changes
  • CI related changes
  • Dependency updates (e.g., add a new gem or update to a version)

What is the ticket # detailing the issue?

Ticket: IVL Product Development - 187413531

A brief description of the changes

Current behavior: The value of the SSN is logged without filtering in the logs.

New behavior: The value of the SSN is now logged as [FILTERED] in the logs as ssn is included in the list of filter parameters.

Feature Flag

For all new feature development, a feature flag is required to control the exposure of the feature to our end users. A feature flag needs a corresponding environment variable to initialize the state of the flag. Please share the name of the environment variable below that would enable/disable the feature and which client(s) it applies to.

Variable name:

  • DC
  • ME

Additional Context

I tagged a cucumber as flaky as it has been flickering a lot. A follow-up ticket is created to fix the issue Flickering cucumber fix.

AppScan CodeSweep Failure

In the event of a failed check on the AppScan CodeSweep step of our GitHub Actions workflow, please review the False Positive protocol outlined here: appscan_codesweep/CODESWEEP_FALSE_POSITIVES_README.MD

Add all required notes to this section if the failure is a suspected false positive.

@saikumar9 saikumar9 enabled auto-merge (squash) April 11, 2024 21:44
@saikumar9 saikumar9 requested review from TreyE and saipraveen18 and removed request for TreyE and saipraveen18 April 11, 2024 21:44
@saikumar9 saikumar9 merged commit a3bdd6f into trunk Apr 12, 2024
114 checks passed
@saikumar9 saikumar9 deleted the pt_187413531 branch April 12, 2024 17:10
saipraveen18 pushed a commit that referenced this pull request Apr 15, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
saikumar9 added a commit that referenced this pull request Apr 17, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request Apr 29, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request Apr 29, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request May 6, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request May 6, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request May 15, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request May 15, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request May 29, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request May 29, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request May 29, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request May 29, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request May 29, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request May 29, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request Jun 12, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request Jun 12, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
jacobkagon pushed a commit that referenced this pull request Jun 12, 2024
adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs
jacobkagon pushed a commit that referenced this pull request Jun 12, 2024
* add rel attributes to external links

* adds ssn to the sensitive parameters list (#3733)

adds ssn to the sensitive parameters list so the value will be replaced with [FILTERED] in the logs

* fix app scan issues

* fix one last app scan issue

* use h helper instead of sanitize_html

* add spec

* add a few missing rel noopener noreferrer attrs to links

* add escape to html links

* remove redundant rel attr from link

---------

Co-authored-by: Sai Kumar Kotagiri <[email protected]>
Co-authored-by: TristanB17 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants