Skip to content
代码片段 群组 项目
提交 a3b01e38 编辑于 作者: Smriti Garg's avatar Smriti Garg 提交者: Reuben Pereira
浏览文件

Added redirect to filtered params

Merge branch 'security-906-glpat-logging' into 'master'

See merge request gitlab-org/security/gitlab!3418

Changelog: security
上级 ea931f1b
No related branches found
No related tags found
无相关合并请求
......@@ -186,6 +186,7 @@ class Application < Rails::Application
# - Any parameter containing `password`
# - Any parameter containing `secret`
# - Any parameter ending with `key`
# - Any parameter named `redirect`, filtered for security concerns of exposing sensitive information
# - Two-factor tokens (:otp_attempt)
# - Repo/Project Import URLs (:import_url)
# - Build traces (:trace)
......@@ -228,6 +229,7 @@ class Application < Rails::Application
variables
content
sharedSecret
redirect
)
# This config option can be removed after Rails 7.1 by https://gitlab.com/gitlab-org/gitlab/-/issues/416270
......
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册