codeninjasllc/discourse
1
0
Fork 0
mirror of https://github.com/codeninjasllc/discourse.git synced 2024-11-23 15:48:43 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

FIX: Don't sanitize API username so that we can potentially identify the source.

Browse source
This commit is contained in:
Guo Xiang Tan 2016-08-25 09:15:41 +08:00
parent 5da768b4fe
commit 41a22b8c5a
2 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
config/application.rb
View file

@ -103,7 +103,6 @@ module Discourse
:password, :password,
:pop3_polling_password, :pop3_polling_password,
:api_key, :api_key,
:api_username,
:s3_secret_access_key, :s3_secret_access_key,
:twitter_consumer_secret, :twitter_consumer_secret,
:facebook_app_secret, :facebook_app_secret,

2
plugins/discourse-nginx-performance-report/script/nginx_analyze.rb
View file

@ -49,7 +49,7 @@ class LogAnalyzer
private private
def self.sanitize_url(url) def self.sanitize_url(url)
url.gsub(/(api_key|api_username)=([\w.\-]+)/, '\1=[FILTERED]') url.gsub(/api_key=([\w.\-]+)/, '\1=[FILTERED]')
end end
end end