clean lists recursively

add "auth" to sensitive keys
match "key" (e.g. see payone)
2026-10-01 19:14:43 +00:00 · 2026-09-28 15:26:32 +02:00 · 2026-09-28 13:16:16 +02:00 · 2026-09-28 11:45:45 +02:00 · 2026-09-28 11:44:45 +02:00 · 2026-09-25 15:03:10 +02:00
1 changed files with 21 additions and 4 deletions
@@ -151,12 +151,29 @@ class LoggingMixin:
        logentry = LogEntry(content_object=self, user=user, action_type=action, event=event,
                            organizer_id=organizer_id, **kwargs)
        if isinstance(data, dict):
-            sensitivekeys = ['password', 'secret', 'api_key']
+            # sensitivekeys are matched whether contained, not exactly
+            sensitivekeys = [
+                'auth',
+                'key',
+                'token',
+                'password',
+                'Password',
+                '_pass',
+                'salt',
+                'secret',
+            ]

-            for sensitivekey in sensitivekeys:
-                for k, v in data.items():
-                    if (sensitivekey in k) and v:
+            def clean_dict_recursive(d):
+                data = d
+                data_iterator = d.items() if isinstance(d, dict) else enumerate(d)
+                for k, v in data_iterator:
+                    if v and any([sensitivekey in str(k) for sensitivekey in sensitivekeys]):
                        data[k] = "********"
+                    elif isinstance(v, (list, dict)):
+                        data[k] = clean_dict_recursive(v)
+                return data
+
+            data = clean_dict_recursive(data)

            logentry.data = json.dumps(data, cls=CustomJSONEncoder, sort_keys=True)
        elif data:
Author	SHA1	Message	Date
Richard Schreiber	1406f40d87	clean lists recursively	2026-09-28 15:26:32 +02:00
Richard Schreiber	ce5cf0238a	add "auth" to sensitive keys	2026-09-28 13:16:16 +02:00
Richard Schreiber	4c109d457c	match "key" (e.g. see payone)	2026-09-28 11:45:45 +02:00
Richard Schreiber	998680baab	add "salt" to sensitive keys	2026-09-28 11:44:45 +02:00
Richard Schreiber	31d2d087a6	fix type mismatch	2026-09-25 15:03:10 +02:00
Richard Schreiber	69a6be73c7	fix flake8	2026-09-25 14:03:30 +02:00
Richard Schreiber	4b31f60207	Extend log_action filter and make recursive	2026-09-25 13:58:19 +02:00