From 6769d35a901637963fff7024c9cb18cacaa2b021 Mon Sep 17 00:00:00 2001 From: hius07 <62179190+hius07@users.noreply.github.com> Date: Tue, 11 Feb 2025 10:44:46 +0200 Subject: [PATCH] socketutil: 'safe' functions for logging --- frontend/socketutil.lua | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/frontend/socketutil.lua b/frontend/socketutil.lua index 7ad9ca132316..213f2babcb6b 100644 --- a/frontend/socketutil.lua +++ b/frontend/socketutil.lua @@ -136,4 +136,38 @@ function socketutil.file_sink(handle, io_err) end end +function socketutil.safe_headers(headers) + local sensitive_headers = { + ["authorization"] = true, + ["cookie"] = true, + ["proxy-authorization"] = true, + ["set-cookie"] = true, + } + local safe_headers = {} + for key, value in pairs(headers) do + if sensitive_headers[key] then + safe_headers[key] = "REDACTED" + else + safe_headers[key] = value + end + end + return safe_headers +end + +function socketutil.safe_request(request) + local sensitive_props = { + ["password"] = true, + ["user"] = true, + } + local safe_request = {} + for key, value in pairs(request) do + if sensitive_props[key] then + safe_request[key] = "REDACTED" + else + safe_request[key] = value + end + end + return safe_request +end + return socketutil