Remove sensitive info from headers

barryvdh · barryvdh · commit 89a88cfcb874 · 2015-09-09T10:29:51.000+02:00
diff --git a/src/DataCollector/SymfonyRequestCollector.php b/src/DataCollector/SymfonyRequestCollector.php
@@ -109,6 +109,12 @@ public function collect()
             $data['session_attributes'] = $sessionAttributes;
         }
 
+        foreach ($data['request_server'] as $key => $value) {
+            if (str_is('*_KEY', $key) || str_is('*_PASSWORD', $key) || str_is('*_SECRET', $key)) {
+                $data['request_server'][$key] = '******';
+            }
+        }
+
         if (isset($data['request_headers']['php-auth-pw'])) {
             $data['request_headers']['php-auth-pw'] = '******';
         }

Original file line number	Diff line number	Diff line change
`@@ -109,6 +109,12 @@ public function collect()`
`109`	`109`	`$data['session_attributes'] = $sessionAttributes;`
`110`	`110`	`}`
`111`	`111`
	`112`	`+ foreach ($data['request_server'] as $key => $value) {`
	`113`	`+ if (str_is('_KEY', $key) \|\| str_is('_PASSWORD', $key) \|\| str_is('*_SECRET', $key)) {`
	`114`	`+ $data['request_server'][$key] = '******';`
	`115`	`+ }`
	`116`	`+ }`
	`117`	`+`
`112`	`118`	`if (isset($data['request_headers']['php-auth-pw'])) {`
`113`	`119`	`$data['request_headers']['php-auth-pw'] = '******';`
`114`	`120`	`}`