Module: Sqreen::Signals::HttpTraceRedaction

Extended by:
Kit::Loggable
Defined in:
lib/sqreen/signals/http_trace_redaction.rb

Class Method Summary collapse

Class Method Details

.redact_trace!(trace, redactor) ⇒ Object

Parameters:



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
 
# File 'lib/sqreen/signals/http_trace_redaction.rb', line 18

def redact_trace!(trace, redactor)
  return unless redactor
  # redact headers (keys unsafe)
  # @type [Sqreen::Kit::Signals::Context::HttpContext]
  http_context = trace.context

  all_redacted = []

  # Redact headers; save redacted values
  # headers are encoded as [key, value], not a hash, so
  # they require some transformation
  orig_headers = http_context.headers
  if orig_headers
    headers = orig_headers.map { |(k, v)| { k => v } }
    headers, redacted = redactor.redact(headers)
    http_context.headers = headers.map(&:first)
    all_redacted += redacted
  end

  # Redact params; save redacted values
  Kit::Signals::Context::HttpContext::PARAMS_ATTRS.each do |attr|
    value = http_context.public_send(attr)
    next unless value
    value, redacted = redactor.redact(value)
    all_redacted += redacted
    http_context.public_send(:"#{attr}=", value)
  end

  all_redacted = all_redacted.uniq.map(&:downcase)

  # Redact attacks and exceptions
  # XXX: no redaction for infos in attacks/exceptions except for WAF data
  # Is this the correct behavior?
  redact_attacks!(trace, redactor, all_redacted)
  redact_exceptions!(trace, redactor, all_redacted)
end