Catch more secrets not redacted

This commit is contained in:
Alexandre Aubin 2021-03-02 01:49:23 +01:00
parent d763247df4
commit 01058aca28

View file

@ -415,7 +415,7 @@ class RedactingFormatter(Formatter):
# (the secret part being at least 3 chars to avoid catching some lines like just "db_pwd=")
# Some names like "key" or "manifest_key" are ignored, used in helpers like ynh_app_setting_set or ynh_read_manifest
match = re.search(
r"(pwd|pass|password|secret|\w+key|token)=(\S{3,})$", record.strip()
r"(pwd|pass|password|secret\w*|\w+key|token)=(\S{3,})$", record.strip()
)
if (
match