Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apply params_filters to URLs in request metadata #318

Merged
merged 2 commits into from
May 13, 2022

Conversation

imjoehaines
Copy link
Member

Goal

As part of our integration with web frameworks, we record the request URL in metadata. Some integrations only record the domain and path, but others also include the query string. However we weren't applying params_filters to the query string parameters and so could leak sensitive information if passed in the query string

This PR applies params_filters to URLs in request metadata for the following integrations:

  • ASGI
  • Django
  • Tornado
  • WSGI

@imjoehaines imjoehaines requested a review from kattrali May 13, 2022 08:54
@imjoehaines imjoehaines changed the base branch from master to next May 13, 2022 08:54
@imjoehaines imjoehaines merged commit 8449dba into next May 13, 2022
@imjoehaines imjoehaines deleted the apply-filters-to-request-url branch May 13, 2022 10:14
@imjoehaines imjoehaines mentioned this pull request May 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants