Remove potential local RPSL password log from irr_rpsl_submit

Fixes https://github.com/irrdnet/irrd/security/code-scanning/3
q · Apr 8, 2024 · 4f5ac12 · 4f5ac12
1 parent 20b771e
commit 4f5ac12
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/irrd/scripts/irr_rpsl_submit.py b/irrd/scripts/irr_rpsl_submit.py
@@ -564,7 +564,12 @@ def create_http_request(requests_text, args):
         method=method,
         headers=headers,
     )
-    logger.debug("Submitting to %s; method %s}; headers %s; data %s", url, method, headers, http_data)
+    filtered_http_data = http_data
+    for password in request_body.get("passwords", []):  # pragma: no cover
+        filtered_http_data.replace(password, b"REMOVED")
+    logger.debug(
+        "Submitting to %s; method %s}; headers %s; data %s", url, method, headers, filtered_http_data
+    )
 
     return http_request