Bug #15940
Package upload action logs whole input as Parameters
Status:
Closed
Priority:
Normal
Assignee:
Category:
Subscriptions
Target version:
Difficulty:
easy
Triaged:
Yes
Bugzilla link:
Pull request:
Team Backlog:
Fixed in Releases:
Found in Releases:
Description
Rails logs all incoming parameters via INFO logger by default (no opt-out).
Package upload request can be huge JSON and it does not make sense to log everything.
Rails provide parameter filters to filter out sensitive data from these (e.g. passwords), the action could perhaps use this to opt-out logging of the whole root data (_json key).
Associated revisions
History
#1
Updated by Justin Sherrill over 2 years ago
- Assignee set to Justin Sherrill
- Legacy Backlogs Release (now unused) set to 162
- Difficulty set to easy
#2
Updated by The Foreman Bot over 2 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/Katello/katello/pull/6264 added
#3
Updated by Brad Buckingham over 2 years ago
- Target version set to 123
#4
Updated by Justin Sherrill over 2 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset katello|59e9f514afaf79b179e3ee08de122aa1db037494.
#5
Updated by Chris Duryee almost 2 years ago
- Bugzilla link set to 1429642
Fixes #15940 - filter out package profile upload logs (#6264)