Comment 1 for bug 789863

Revision history for this message
Hanno Schlichting (hannosch) wrote :

Hhm, I wonder if we should maybe override the requests __str__ (or whatever is called to publish it) with a version that reports very little information and doesn't leak anything.

The request might commonly be referred to as request or REQUEST, but it could be reachable under any other variable name as well.

I'm not aware of any code that relies on str(request) to work, but this needs investigation.