Commit 08d081ca authored by Sean McGivern's avatar Sean McGivern

Filter title, description, and body from logs

These can contain sensitive content.
parent 004b72fe
---
title: Filter title, description, and body parameters from logs
merge_request:
author:
type: changed
...@@ -105,10 +105,23 @@ module Gitlab ...@@ -105,10 +105,23 @@ module Gitlab
# - Sentry DSN (:sentry_dsn) # - Sentry DSN (:sentry_dsn)
# - File content from Web Editor (:content) # - File content from Web Editor (:content)
# - Jira shared secret (:sharedSecret) # - Jira shared secret (:sharedSecret)
# - Titles, bodies, and descriptions for notes, issues, etc.
# #
# NOTE: It is **IMPORTANT** to also update gitlab-workhorse's filter when adding parameters here to not # NOTE: It is **IMPORTANT** to also update labkit's filter when
# introduce another security vulnerability: https://gitlab.com/gitlab-org/gitlab-workhorse/issues/182 # adding parameters here to not introduce another security
config.filter_parameters += [/token$/, /password/, /secret/, /key$/, /^note$/, /^text$/] # vulnerability:
# https://gitlab.com/gitlab-org/labkit/blob/master/mask/matchers.go
config.filter_parameters += [
/token$/,
/password/,
/secret/,
/key$/,
/^body$/,
/^description$/,
/^note$/,
/^text$/,
/^title$/
]
config.filter_parameters += %i( config.filter_parameters += %i(
certificate certificate
encrypted_key encrypted_key
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment