summaryrefslogtreecommitdiff
path: root/app/models/hooks/web_hook_log.rb
diff options
context:
space:
mode:
authorGitLab Bot <gitlab-bot@gitlab.com>2022-07-27 19:04:22 +0000
committerGitLab Bot <gitlab-bot@gitlab.com>2022-07-27 19:04:22 +0000
commit5de2457398cc9ec42a7f3b0b9e17515b5d4ef235 (patch)
tree9e770e574f6bf7b46b4948a6f5863d22349dd0b1 /app/models/hooks/web_hook_log.rb
parent01063c436e1ad664bac2fc480d58cda937ca340b (diff)
downloadgitlab-ce-5de2457398cc9ec42a7f3b0b9e17515b5d4ef235.tar.gz
Add latest changes from gitlab-org/security/gitlab@15-1-stable-ee
Diffstat (limited to 'app/models/hooks/web_hook_log.rb')
-rw-r--r--app/models/hooks/web_hook_log.rb7
1 files changed, 7 insertions, 0 deletions
diff --git a/app/models/hooks/web_hook_log.rb b/app/models/hooks/web_hook_log.rb
index 2f03b3591cf..24e5f193a32 100644
--- a/app/models/hooks/web_hook_log.rb
+++ b/app/models/hooks/web_hook_log.rb
@@ -22,6 +22,7 @@ class WebHookLog < ApplicationRecord
validates :web_hook, presence: true
before_save :obfuscate_basic_auth
+ before_save :redact_author_email
def self.recent
where('created_at >= ?', 2.days.ago.beginning_of_day)
@@ -52,4 +53,10 @@ class WebHookLog < ApplicationRecord
def obfuscate_basic_auth
self.url = safe_url
end
+
+ def redact_author_email
+ return unless self.request_data.dig('commit', 'author', 'email').present?
+
+ self.request_data['commit']['author']['email'] = _('[REDACTED]')
+ end
end