🎨 #4055 修复 DataUtils.handleDataWithSecret 在日志输出前对查询串参数 secret 的脱敏缺陷
This commit is contained in:
committed by
GitHub
parent
6ca6c342aa
commit
d60cd85578
@@ -17,8 +17,8 @@ public class DataUtils {
|
||||
*/
|
||||
public static <E> E handleDataWithSecret(E data) {
|
||||
E dataForLog = data;
|
||||
if(data instanceof String && StringUtils.contains((String)data, "&secret=")){
|
||||
dataForLog = (E) RegExUtils.replaceAll((String)data,"&secret=\\w+&","&secret=******&");
|
||||
if (data instanceof String && StringUtils.contains((String) data, "secret=")) {
|
||||
dataForLog = (E) RegExUtils.replaceAll((String) data, "(^|[?&])secret=[^&]*", "$1secret=******");
|
||||
}
|
||||
return dataForLog;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user