starlingx
/
gui
Code Issues Proposed changes

Add admin_password to mask_fields 

This change adds the admin_password to the mask_fields in the
settings.py file, in order to prevent this password from being logged in
plain text.

Test Plan:
PASS: Apply this change and verify that in every user password change,
the admin_password is masked.

Closes-bug: 2058294

Signed-off-by: Enzo Candotti <enzo.candotti@windriver.com>
Change-Id: Iba80d682e7bd74c0903dd2f23334f3298229cb2e
This commit is contained in:
Enzo Candotti 2024-03-18 19:40:46 -03:00
parent 49a8a7a913
commit f04638e8f8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
starlingx-dashboard/starlingx-dashboard/starlingx_dashboard/local/local_settings.d/_30_stx_local_settings.py
View File

@ -1,5 +1,5 @@
#
# Copyright (c) 2019-2023 Wind River Systems, Inc.
# Copyright (c) 2019-2024 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
@ -99,7 +99,7 @@ OPERATION_LOG_ENABLED = True
OPERATION_LOG_OPTIONS = {
'mask_fields': ['password', 'bm_password', 'bm_confirm_password',
'current_password', 'confirm_password', 'new_password',
'fake_password', 'sysadmin_password'],
'fake_password', 'sysadmin_password', 'admin_password'],
'ignore_urls': [],
'target_methods': ['POST', 'PUT', 'DELETE'],
'format': ("[%(project_name)s %(project_id)s] [%(user_name)s %(user_id)s]"