aboutsummaryrefslogtreecommitdiffstats
path: root/railties
diff options
context:
space:
mode:
authorPrem Sichanugrist & Xavier Noria <fxn@hashref.com>2011-01-01 23:51:05 +0700
committerXavier Noria <fxn@hashref.com>2011-03-11 00:16:18 +0100
commit68802d0fbe9d20ef8c5f6626d4b3279bd3a42d3e (patch)
tree1b8b15255e7719ad947fc404299b7c7e62598b17 /railties
parent51a269b2282ec09cf58614e738a2d0e40d2909d3 (diff)
downloadrails-68802d0fbe9d20ef8c5f6626d4b3279bd3a42d3e.tar.gz
rails-68802d0fbe9d20ef8c5f6626d4b3279bd3a42d3e.tar.bz2
rails-68802d0fbe9d20ef8c5f6626d4b3279bd3a42d3e.zip
Filter sensitive query string parameters in the log [#6244 state:committed]
This provides more safety to applications that put secret information in the query string, such as API keys or SSO tokens. Signed-off-by: Xavier Noria <fxn@hashref.com>
Diffstat (limited to 'railties')
-rw-r--r--railties/lib/rails/rack/logger.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/railties/lib/rails/rack/logger.rb b/railties/lib/rails/rack/logger.rb
index 32acc66f10..3be262de08 100644
--- a/railties/lib/rails/rack/logger.rb
+++ b/railties/lib/rails/rack/logger.rb
@@ -19,7 +19,7 @@ module Rails
def before_dispatch(env)
request = ActionDispatch::Request.new(env)
- path = request.fullpath
+ path = request.filtered_path
info "\n\nStarted #{request.request_method} \"#{path}\" " \
"for #{request.ip} at #{Time.now.to_default_s}"