1
0
mirror of synced 2026-10-18 21:48:31 +08:00

🎨 #4055 修复 DataUtils.handleDataWithSecret 在日志输出前对查询串参数 secret 的脱敏缺陷

This commit is contained in:
Vasiliy Mikhailov
2026-07-10 17:30:59 +03:00
committed by GitHub
parent 6ca6c342aa
commit d60cd85578
2 changed files with 30 additions and 2 deletions

View File

@@ -17,8 +17,8 @@ public class DataUtils {
*/
public static <E> E handleDataWithSecret(E data) {
E dataForLog = data;
if(data instanceof String && StringUtils.contains((String)data, "&secret=")){
dataForLog = (E) RegExUtils.replaceAll((String)data,"&secret=\\w+&","&secret=******&");
if (data instanceof String && StringUtils.contains((String) data, "secret=")) {
dataForLog = (E) RegExUtils.replaceAll((String) data, "(^|[?&])secret=[^&]*", "$1secret=******");
}
return dataForLog;
}