mirror of
https://github.com/zulip/zulip.git
synced 2025-11-04 22:13:26 +00:00
44ea8ab973
This should really be handled on a per-method basis, but in general we don't want "password" or "key" to be sent to us for security reasons. Addresses trac #569. (imported from commit 1c246fce00f3740977c595641341ee36eb5ed831)
12 lines
512 B
Python
12 lines
512 B
Python
from django.views.debug import SafeExceptionReporterFilter
|
|
|
|
class HumbugExceptionReporterFilter(SafeExceptionReporterFilter):
|
|
def get_post_parameters(self, request):
|
|
filtered_post = SafeExceptionReporterFilter.get_post_parameters(self, request).copy()
|
|
filtered_vars = ['content', 'secret', 'password', 'key', 'api_key', 'subject', 'stream']
|
|
|
|
for var in filtered_vars:
|
|
if var in filtered_post:
|
|
filtered_post[var] = '**********'
|
|
return filtered_post
|