Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Don't log urlencoded access_tokens #477

Merged
merged 2 commits into from
Jan 19, 2016
Merged

Conversation

erikjohnston
Copy link
Member

No description provided.

@@ -496,8 +496,8 @@ def __repr__(self):

def get_redacted_uri(self):
return re.sub(
r'(\?.*access_token=)[^&]*(.*)$',
r'\1<redacted>\2',
r'(\?.*accesss(_|%5[Ff])token=)[^&]*(.*)$',
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"access" is traditionally spelt with 2 "s"s.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HUSH YOU

@erikjohnston
Copy link
Member Author

PTAL

@NegativeMjark
Copy link
Contributor

LGTM

@erikjohnston
Copy link
Member Author

matrixbot: test this please

erikjohnston added a commit that referenced this pull request Jan 19, 2016
@erikjohnston erikjohnston merged commit 7a079ad into develop Jan 19, 2016
@erikjohnston erikjohnston deleted the erikj/access_token_log branch February 23, 2016 16:44
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants