diff options
| author | Akihiro Motoki <amotoki@gmail.com> | 2018-01-22 09:20:16 +0900 |
|---|---|---|
| committer | Akihiro Motoki <amotoki@gmail.com> | 2018-01-31 22:39:22 +0900 |
| commit | 1941d34e5cecf33090e73665034a8196b220e690 (patch) | |
| tree | 9bec14e62853cf418033069c7d4341350bec2870 /horizon | |
| parent | 439c3e578d78005899b80cba3656f8813a67558c (diff) | |
| download | horizon-1941d34e5cecf33090e73665034a8196b220e690.tar.gz | |
operation_log: Mask more password fields by default
Change-Id: I69283a2b692d1fca93aad1d5ed26a29de4e0e4a9
Closes-Bug: #1744609
Diffstat (limited to 'horizon')
| -rw-r--r-- | horizon/middleware/operation_log.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/horizon/middleware/operation_log.py b/horizon/middleware/operation_log.py index 973ed6694..2eb1efcd3 100644 --- a/horizon/middleware/operation_log.py +++ b/horizon/middleware/operation_log.py @@ -67,8 +67,10 @@ class OperationLogMiddleware(object): " [%(request_scheme)s] [%(referer_url)s] [%(request_url)s]" " [%(message)s] [%(method)s] [%(http_status)s] [%(param)s]") _default_ignored_urls = ['/js/', '/static/', '^/api/'] + _default_mask_fields = ['password', 'current_password', + 'new_password', 'confirm_password'] self.target_methods = [x for x in _methods if x in _available_methods] - self.mask_fields = _log_option.get("mask_fields", ['password']) + self.mask_fields = _log_option.get("mask_fields", _default_mask_fields) self.format = _log_option.get("format", self._default_format) self._logger = logging.getLogger('horizon.operation_log') |