Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Stop leaking sensitive header values in error messages #762

Merged
merged 1 commit into from Oct 7, 2021
Merged

Stop leaking sensitive header values in error messages #762

merged 1 commit into from Oct 7, 2021

Commits on Oct 7, 2021

  1. Stop leaking sensitive header values in error messages 

    The protection against invalid header values should not leak their
content in the error message. Exceptions are commonly logged, sent to
third-party error monitoring systems, or published in internal
communication/messenger systems. A range of HTTP headers, like
`Authorization`, `Api-Key`, or similar, contain sensitive information
which should not be sent to such public destinations.
    @grobie
    grobie committed Oct 7, 2021
    Copy the full SHA
    4f1d960 View commit details
    Browse the repository at this point in the history