Skip to content
This repository was archived by the owner on Oct 23, 2023. It is now read-only.
This repository was archived by the owner on Oct 23, 2023. It is now read-only.

SanitizePasswordsProcessor doesn't sanitize request params when request appears in local in a stack trace #534

@gavinwahl

Description

@gavinwahl

SanititizePasswordsProcessor sanitizes request parameters in the structured request dict, but not when request is a local variable in the stack trace. Sentry shows the repr of the local variables, and you end up with with the request parameters there:

<WSGIRequest
path:/checkout/,
GET:<QueryDict: {}>,
POST:<QueryDict: {u'cc_number': [u'4111111111111111'], u'cc_lastname':...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions