IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

filter params correctly from error log

Browse Source
This commit is contained in:
Sam 2013-10-13 08:07:09 +11:00
parent 60284d8a9a
commit e5fbdde56f
1 changed files with 1 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
app/models/error_log.rb
View File

@ -29,7 +29,7 @@ class ErrorLog
date: DateTime.now, date: DateTime.now,
guid: SecureRandom.uuid, guid: SecureRandom.uuid,
user_id: user && user.id, user_id: user && user.id,
request: filter_sensitive_post_data_parameters(controller, request.parameters).inspect, parameters: request && request.filtered_parameters.to_json,
action: controller.action_name, action: controller.action_name,
controller: controller.controller_name, controller: controller.controller_name,
backtrace: sanitize_backtrace(exception.backtrace).join("\n"), backtrace: sanitize_backtrace(exception.backtrace).join("\n"),
@ -92,17 +92,4 @@ class ErrorLog
trace.map { |line| Pathname.new(line.gsub(re, "[RAILS_ROOT]")).cleanpath.to_s } trace.map { |line| Pathname.new(line.gsub(re, "[RAILS_ROOT]")).cleanpath.to_s }
end end
def self.exclude_raw_post_parameters?(controller)
controller && controller.respond_to?(:filter_parameters)
end
def self.filter_sensitive_post_data_parameters(controller, parameters)
exclude_raw_post_parameters?(controller) ? controller.__send__(:filter_parameters, parameters) : parameters
end
def self.filter_sensitive_post_data_from_env(env_key, env_value, controller)
return env_value unless exclude_raw_post_parameters?
return PARAM_FILTER_REPLACEMENT if (env_key =~ /RAW_POST_DATA/i)
return controller.__send__(:filter_parameters, {env_key => env_value}).values[0]
end
end end