Login

Password Obfuscation Log Filter

Author:
nikmolnar
Posted:
June 28, 2013
Language:
Python
Version:
1.4
Tags:
filter log password logging obfuscation
Score:
0 (after 0 ratings)

This is a simple logging filter to ensure that user-entered passwords aren't recorded in the log or emailed to admins as part of the request data if an error occurs during registration/login.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
from logging import Filter

class PasswordObfuscationFilter(Filter):
    """Filters out passwords in log messages."""

    def filter(self, record):
        if hasattr(record, 'request') and record.request.POST.get('password', None):
            qd = record.request.POST.copy()
            qd['password'] = "%s (removed)" % ('x'*8)
            record.request.POST = qd
        return True

More like this

  1. Email obfuscation filter using ROT13 by worksology 5 years, 10 months ago
  2. group_required decorator by msanders 5 years, 6 months ago
  3. phpbb (2.x) authentication backend by bram 6 years, 7 months ago
  4. Email-obfuscator Template Tag by gronimo 2 years, 9 months ago
  5. Email and phone templatetag obfuscator by sunn 5 years, 7 months ago

Comments

Please login first before commenting.