Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tracing log #192 #195

Merged
merged 1 commit into from Aug 7, 2022
Merged

Tracing log #192 #195

merged 1 commit into from Aug 7, 2022

Conversation

p53
Copy link

@p53 p53 commented Aug 6, 2022

Title

Summary

Type

[] Bug fix
[] Feature request
[] Enhancement
[] Docs

Why?

Requirements

How to try it?

Documentation

Additional Information

Checklist:

  • My change requires a change to the documentation or CHANGELOG.
  • I have updated the documentation/CHANGELOG accordingly.

@p53 p53 added the enhancement New feature or request label Aug 6, 2022
@p53 p53 added this to In progress in Gatekeeper via automation Aug 6, 2022
@p53 p53 self-assigned this Aug 6, 2022
@p53 p53 added this to the 1.6.1 milestone Aug 6, 2022
@p53 p53 changed the title Tracing log Tracing log #192 Aug 6, 2022

if r.config.Verbose {
requestLogger := r.log.With(
zap.Any("headers", req.Header),

Check failure

Code scanning / CodeQL

Log entries created from user input

This log write receives unsanitized user input from [here](1).

if r.config.Verbose {
requestLogger := r.log.With(
zap.Any("headers", req.Header),

Check failure

Code scanning / CodeQL

Clear-text logging of sensitive information

Sensitive data returned by [HTTP request headers](1) is logged here.
@p53 p53 merged commit 3147143 into gogatekeeper:master Aug 7, 2022
Gatekeeper automation moved this from In progress to Done Aug 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Development

Successfully merging this pull request may close these issues.

None yet

1 participant