Case-incensitive search are likely to catch too mnuch legitimate stuff resulting in redacting a shitload of stuff

This commit is contained in:
Alexandre Aubin 2021-06-10 15:44:00 +02:00
parent 3ce978aa2f
commit c8d4bbf82b

View file

@ -415,9 +415,8 @@ class RedactingFormatter(Formatter):
# (the secret part being at least 3 chars to avoid catching some lines like just "db_pwd=")
# Some names like "key" or "manifest_key" are ignored, used in helpers like ynh_app_setting_set or ynh_read_manifest
match = re.search(
r"(pwd|pass|password|passphrase|secret\w*|\w+key|token)=(\S{3,})$",
r"(pwd|pass|password|passphrase|secret\w*|\w+key|token|PASSPHRASE)=(\S{3,})$",
record.strip(),
re.IGNORECASE
)
if (
match