yaroslav / rails fork watch download tarball
public
Fork of rails/rails
Description: Ruby on Rails
Homepage: http://rubyonrails.org
Clone URL: git://github.com/yaroslav/rails.git
Search Repo: 
Patch adds commented "filter_parameter_logging :password" to 
default ApplicationController for a Rails application.

This may help to remind the developer to filter sensitive information from 
application logs.
yaroslav (author)
Wed Apr 16 04:21:49 -0700 2008
commit  20ae71cb830bd354b0bf02ccbd4de778dd10aa29
tree    d64fe354e01e5b38f1feb240204956fa96408849
parent  745359a49452da34978724144eaa318b8a363e08
0
railties/helpers/application.rb 
...
7
8
9
 
 
 
 
10
 
...
7
8
9
10
11
12
13
14
 
0
@@ -7,5 +7,9 @@
0
   # See ActionController::RequestForgeryProtection for details
0
   # Uncomment the :secret if you're not using the cookie session store
0
   protect_from_forgery # :secret => '<%= app_secret %>'
0
+  
0
+  # See ActionController::Base for details
0
+  # Uncomment this to filter the contents of submitted sensitive data parameters from your application log (in this case, all fields with names like "password").
0
+  # filter_parameter_logging :password 
0
 end

Comments

    No one has commented yet.