OpenStack Security Advisory

  1. Bug #1628031
  2. Comment #38

Comment 38 for bug 1628031

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to oslo.middleware (stable/mitaka)

Reviewed: https://review.openstack.org/425734
Committed: https://git.openstack.org/cgit/openstack/oslo.middleware/commit/?id=ec073669a49267abcb0c1d776b9050342dac5a4a
Submitter: Jenkins
Branch: stable/mitaka

commit ec073669a49267abcb0c1d776b9050342dac5a4a
Author: Jamie Lennox <email address hidden>
Date: Wed Sep 28 15:03:53 2016 +1000

    Filter token data out of catch_errors middleware

    If an exception is caught by the catch_errors middleware the entire
    request is dumped into the log including sensitive information like
    tokens. Filter that information before outputting the failed request.

    Closes-Bug: #1628031
    Change-Id: I2563403993513c37751576223275350cac2e0937