Do NOT store password in logs

galette-community · Jun 13, 2024 · e85ac29 · e85ac29
1 parent 54e2f86
commit e85ac29
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/GaletteOAuth2/Tools/Debug.php b/lib/GaletteOAuth2/Tools/Debug.php
@@ -88,6 +88,9 @@ public static function logRequest($fct, $request): void
             $msg .= "\nGET dump: " . self::printVar($qp);
         }
         if (count($post = (array)$request->getParsedBody()) > 0) {
+            if (isset($post['password'])) {
+                $post['password'] = 'HIDDEN';
+            }
             $msg .= "\nPOST dump: " . self::printVar($post);
         }
         $msg .= "\n";