Discource-C/discourse
1
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-08 04:18:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

FIX: Sanitize sensitive parameters in nginx log report.

Browse Source
This commit is contained in:
Guo Xiang Tan 2016-07-19 15:33:49 +08:00
parent 1ea1cefb35
commit 85d7526219
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
plugins/discourse-nginx-performance-report/script/nginx_analyze.rb
View File

@ -33,6 +33,8 @@ class LogAnalyzer
result.route += " (PUT)" result.route += " (PUT)"
end end
result.url = self.sanitize_url(result.url)
result result
end end
@ -43,6 +45,12 @@ class LogAnalyzer
def parsed_timge def parsed_timge
DateTime.strptime(time, TIME_FORMAT) if time DateTime.strptime(time, TIME_FORMAT) if time
end end
private
def self.sanitize_url(url)
url.gsub(/(api_key|api_user)=(\w+)/, '\1=[FILTERED]')
end
end end
attr_reader :total_requests, :message_bus_requests, :filenames, attr_reader :total_requests, :message_bus_requests, :filenames,