Allows you to specify sensitive parameters which will be replaced from the request log by looking in the query string of the request and all subhashes of the params hash to filter. If a block is given, each key and value of the params hash and all subhashes is passed to it, the value or key can be replaced using String#replace or similar method.
Examples:
env["action_dispatch.parameter_filter"] = [:password] => replaces the value to all keys matching /password/ with "[FILTERED]" env["action_dispatch.parameter_filter"] = [:foo, "bar"] => replaces the value to all keys matching /foo|bar/ with "[FILTERED]" env["action_dispatch.parameter_filter"] = lambda do |k,v| v.reverse! if k =~ /secret/ end => reverses the value to all keys matching /secret/
- E
- F
- P
| KV_RE | = | '[^&;=]+' |
| PAIR_RE | = | %r{(#{KV_RE})=(#{KV_RE})} |
Return a hash of request.env with all sensitive data replaced.
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 37 def filtered_env @filtered_env ||= env_filter.filter(@env) end
Return a hash of parameters with all sensitive data replaced.
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 32 def filtered_parameters @filtered_parameters ||= parameter_filter.filter(parameters) end
Reconstructed a path with all sensitive GET parameters replaced.
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 42 def filtered_path @filtered_path ||= query_string.empty? ? path : "#{path}?#{filtered_query_string}" end
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 52 def env_filter parameter_filter_for(Array.wrap(@env["action_dispatch.parameter_filter"]) << /RAW_POST_DATA/) end
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 62 def filtered_query_string query_string.gsub(PAIR_RE) do |_| parameter_filter.filter([[$1, $2]]).first.join("=") end end
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 48 def parameter_filter parameter_filter_for(@env["action_dispatch.parameter_filter"]) end
Source: show
# File actionpack/lib/action_dispatch/http/filter_parameters.rb, line 56 def parameter_filter_for(filters) @@parameter_filter_for[filters] ||= ParameterFilter.new(filters) end