itsscb/cargo
1
0
Fork 0
mirror of https://github.com/rust-lang/cargo.git synced 2025-10-01 11:30:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto merge of #8222 - ehuss:redact-http-debug, r=alexcrichton

Browse Source 
Try to remove secrets from http.debug.

This tries to remove some private data (such as tokens) from the `http.debug` output.
This commit is contained in:
bors 2020-05-08 05:37:08 +00:00
commit 911f0b94e5
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/cargo/ops/registry.rs
View File

@ -556,7 +556,12 @@ pub fn configure_http_handle(config: &Config, handle: &mut Easy) -> CargoResult<
};
match str::from_utf8(data) {
Ok(s) => {
for line in s.lines() {
for mut line in s.lines() {
if line.starts_with("Authorization:") {
line = "Authorization: [REDACTED]";
} else if line[..line.len().min(10)].eq_ignore_ascii_case("set-cookie") {
line = "set-cookie: [REDACTED]";
}
log!(level, "http-debug: {} {}", prefix, line);
}
}