Projet

Général

Profil

0001-base-hide-more-secret-fields-in-service-description-.patch

Nicolas Roche, 11 août 2020 14:57

Télécharger (1,76 ko)

Voir les différences: 

Subject: [PATCH] base: hide more secret fields in service description (#45816)


 passerelle/base/models.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)
passerelle/base/models.py
242 242 

  		




  243
  243
  
    
    def get_delete_url(self):

  		




  244
  244
  
    
        return reverse('delete-connector',

  		




  245
  245
  
    
                kwargs={'connector': self.get_connector_slug(), 'slug': self.slug})

  		




  246
  246
  
    

  		




  247
  247
  
    
    def get_description_fields(self):

  		




  248
  248
  
    
        fields = []

  		




  249
  249
  
    
        for field in self._meta.fields:

  		




  250
  
  
    
            if (field.name.endswith(('key', 'password', 'secret', 'keystore', 'token')) or

  		




  
  250
  
    
            if (field.name.endswith(('key', 'password', 'secret', 'keystore', 'token',

  		




  
  251
  
    
                                     'username')) or

  		




  251
  252
  
    
                    field.name in ('id', 'title', 'slug', 'description',

  		




  252
  
  
    
                                   'log_level', 'users', 'client_certificate')):

  		




  
  253
  
    
                                   'log_level', 'users', 'client_certificate',

  		




  
  254
  
    
                                   'groupname', 'account', 'account_sid')):

  		




  253
  255
  
    
                continue

  		




  254
  256
  
    
            if hasattr(self, 'get_%s_display' % field.name):

  		




  255
  257
  
    
                value = getattr(self, 'get_%s_display' % field.name)()

  		




  256
  258
  
    
            else:

  		




  257
  259
  
    
                value = getattr(self, field.name, None)

  		




  258
  260
  
    
                if isinstance(field, models.URLField) and value:

  		




  259
  261
  
    
                    # hide http authentication part

  		




  260
  262
  
    
                    value = re.sub(r'://([^/]*:[^/]*?)@', '://***:***@', value)

  		




  261
  
  
    
-