oslo.utils/releasenotes/notes/mask-dict-passwords-99357ffb7972fb0b.yaml
Dougal Matthews ed70bd3cd1 Make mask_dict_password case insensitive and add new patterns
In Icc19b7c8bdb6a3182939d5e9fdef21288b19f43d mask_password was made case
insensitive but mask_dict_password wasn't. This update makes the
behaviour of these functions the same.

Instead of lowering _SANITIZE_KEYS each time the source list is lowered.

New password patterns from realworld logs were added to the patterns.

Change-Id: Ic3ee301857630a15b9c26fd5d0fc907c43199517
Related-Bug: #1850843
2019-11-15 17:09:26 +01:00

9 lines
325 B
YAML

---
security:
- |
This patch ensures that we mask sensitive data when masking dicts, even if
the case doesn't match. This means the behaviour of mask_password and
mask_dict_password is now the same.
- |
Additional password names were included from real world logs that contained
sensitive information.