mirror of
https://github.com/9001/copyparty.git
synced 2025-08-18 17:32:20 -06:00
censor passwords in logs
This commit is contained in:
parent
83b4038b85
commit
9d014087f4
|
@ -693,6 +693,9 @@ class AuthSrv(object):
|
|||
self.user = user
|
||||
self.iuser = {v: k for k, v in user.items()}
|
||||
|
||||
pwds = [re.escape(x) for x in self.iuser.keys()]
|
||||
self.re_pwd = re.compile("=(" + "|".join(pwds) + ")([]&; ]|$)")
|
||||
|
||||
# import pprint
|
||||
# pprint.pprint({"usr": user, "rd": mread, "wr": mwrite, "mnt": mount})
|
||||
|
||||
|
|
|
@ -54,8 +54,16 @@ class HttpCli(object):
|
|||
self.out_headers = {"Access-Control-Allow-Origin": "*"}
|
||||
|
||||
def log(self, msg, c=0):
|
||||
ptn = self.asrv.re_pwd
|
||||
if ptn.search(msg):
|
||||
msg = ptn.sub(self.unpwd, msg)
|
||||
|
||||
self.log_func(self.log_src, msg, c)
|
||||
|
||||
def unpwd(self, m):
|
||||
a, b = m.groups()
|
||||
return "=\033[7m {} \033[27m{}".format(self.asrv.iuser[a], b)
|
||||
|
||||
def _check_nonfatal(self, ex):
|
||||
return ex.code < 400 or ex.code in [404, 429]
|
||||
|
||||
|
|
Loading…
Reference in a new issue