From 01058aca281a2bcde3092d9fb35a548505370867 Mon Sep 17 00:00:00 2001
From: Alexandre Aubin <alex.aubin@mailoo.org>
Date: Tue, 2 Mar 2021 01:49:23 +0100
Subject: [PATCH] Catch more secrets not redacted

---
 src/yunohost/log.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/yunohost/log.py b/src/yunohost/log.py
index 763967b38..1b7d66c44 100644
--- a/src/yunohost/log.py
+++ b/src/yunohost/log.py
@@ -415,7 +415,7 @@ class RedactingFormatter(Formatter):
             # (the secret part being at least 3 chars to avoid catching some lines like just "db_pwd=")
             # Some names like "key" or "manifest_key" are ignored, used in helpers like ynh_app_setting_set or ynh_read_manifest
             match = re.search(
-                r"(pwd|pass|password|secret|\w+key|token)=(\S{3,})$", record.strip()
+                r"(pwd|pass|password|secret\w*|\w+key|token)=(\S{3,})$", record.strip()
             )
             if (
                 match