From aa9079505082d92d4ee5dc6a4adca056422422ed Mon Sep 17 00:00:00 2001 From: Markus Holtermann Date: Wed, 31 Jul 2024 11:44:49 -0300 Subject: Fixed #35646 -- Extended SafeExceptionReporterFilter.hidden_settings to treat `AUTH` as a sensitive match. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> --- tests/view_tests/tests/test_debug.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'tests') diff --git a/tests/view_tests/tests/test_debug.py b/tests/view_tests/tests/test_debug.py index 0cc6348920..4b0a7cf49d 100644 --- a/tests/view_tests/tests/test_debug.py +++ b/tests/view_tests/tests/test_debug.py @@ -1557,7 +1557,8 @@ class ExceptionReporterFilterTests( "SECRET_KEY_FALLBACKS", "PASSWORD", "API_KEY", - "AUTH_TOKEN", + "SOME_TOKEN", + "MY_AUTH", ] def test_non_sensitive_request(self): @@ -1885,6 +1886,7 @@ class ExceptionReporterFilterTests( "PASSWORD": "super secret", "SECRET_VALUE": "super secret", "SOME_TOKEN": "super secret", + "THE_AUTH": "super secret", } request = self.rf.get("/", headers=headers) reporter_filter = SafeExceptionReporterFilter() -- cgit v1.3