summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAkihiro Motoki <amotoki@gmail.com>2018-01-22 09:20:16 +0900
committerAkihiro Motoki <amotoki@gmail.com>2018-02-16 18:31:39 +0000
commit63fd51cdd85197d756f27cb9d9fc3ec44d862aef (patch)
tree950b5e6830eb5027bb548ea420b0fd52fad2f1ac
parent5d77b95586fd5491b3dee5d5c199c34f53680370 (diff)
downloadhorizon-63fd51cdd85197d756f27cb9d9fc3ec44d862aef.tar.gz
operation_log: Mask more password fields by default
Change-Id: I69283a2b692d1fca93aad1d5ed26a29de4e0e4a9 Closes-Bug: #1744609 (cherry picked from commit 1941d34e5cecf33090e73665034a8196b220e690)
-rw-r--r--horizon/middleware/operation_log.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/horizon/middleware/operation_log.py b/horizon/middleware/operation_log.py
index 973ed6694..2eb1efcd3 100644
--- a/horizon/middleware/operation_log.py
+++ b/horizon/middleware/operation_log.py
@@ -67,8 +67,10 @@ class OperationLogMiddleware(object):
" [%(request_scheme)s] [%(referer_url)s] [%(request_url)s]"
" [%(message)s] [%(method)s] [%(http_status)s] [%(param)s]")
_default_ignored_urls = ['/js/', '/static/', '^/api/']
+ _default_mask_fields = ['password', 'current_password',
+ 'new_password', 'confirm_password']
self.target_methods = [x for x in _methods if x in _available_methods]
- self.mask_fields = _log_option.get("mask_fields", ['password'])
+ self.mask_fields = _log_option.get("mask_fields", _default_mask_fields)
self.format = _log_option.get("format", self._default_format)
self._logger = logging.getLogger('horizon.operation_log')