diff options
| author | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-11-07 06:29:35 +0000 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-11-07 13:08:11 +0200 |
| commit | a8d86df94099317f2918bd0cf1f147b822bfc599 (patch) | |
| tree | 34296d2052d6577c8f4fe6e99988b8f704fa577f /releasenotes | |
| parent | e75f4c5ad91962e272d65daa770e00f70f931ecb (diff) | |
| download | oslo-context-a8d86df94099317f2918bd0cf1f147b822bfc599.tar.gz | |
Ouput a placeholder instead of the auth_token2.19.3
As the name of the get_logging_values suggests, that function will
get entries from the context for logging purposes. For this, we
shouldn't need the auth_token since it might potentially leak
in the logs.
This filters out the auth_token by setting it as '***' by
default.
Change-Id: I2b245c1665c3587be3c476b803122788d186e5d5
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/dont-leak-auth-token-fb7075316cf87b7c.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/releasenotes/notes/dont-leak-auth-token-fb7075316cf87b7c.yaml b/releasenotes/notes/dont-leak-auth-token-fb7075316cf87b7c.yaml new file mode 100644 index 0000000..6ae3a04 --- /dev/null +++ b/releasenotes/notes/dont-leak-auth-token-fb7075316cf87b7c.yaml @@ -0,0 +1,7 @@ +--- +security: + - | + The ``get_logging_values`` function no longer outputs the auth_token, but + instead leaves it as ``***`` instead. As the name suggests, this function is + meant for logging, and letting the auth_token there might leak sensitive + data. |