utils: hide passwords/authentication specified in cli parameters as *…

…auth=xyz (e.g. --http-auth=abc:xyz)" in html report
janreges · Dec 20, 2023 · c8bb88f · c8bb88f
1 parent 2d14bd5
commit c8bb88f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Crawler/Utils.php b/src/Crawler/Utils.php
@@ -345,8 +345,8 @@ public static function getUrlWithoutSchemeAndHost(string $url, ?string $onlyWhen
     public static function getSafeCommand(string $command): string
     {
         return preg_replace(
-            ['/(pass[a-z]{0,5})=\S+/i', '/(keys?)=\S+/i', '/(secrets?)=\S+/i'],
-            ['$1=***', '$1=***', '$1=***'],
+            ['/(pass[a-z]{0,5})=\S+/i', '/(keys?)=\S+/i', '/(secrets?)=\S+/i', '/(auth)=\S+/i'],
+            ['$1=***', '$1=***', '$1=***', '$1=***'],
             $command
         );
     }