Module: ActionDispatch::Http::FilterParameters

Included in:
Request
Defined in:
lib/action_dispatch/http/filter_parameters.rb

Overview

Allows you to specify sensitive query string and POST parameters to filter from the request log.

# Replaces values with "[FILTERED]" for keys that match /foo|bar/i.
env["action_dispatch.parameter_filter"] = [:foo, "bar"]

For more information about filter behavior, see ActiveSupport::ParameterFilter.

Constant Summary collapse

ENV_MATCH =

:nodoc:

[/RAW_POST_DATA/, "rack.request.form_vars"]
NULL_PARAM_FILTER =

:nodoc:

ActiveSupport::ParameterFilter.new
NULL_ENV_FILTER =

:nodoc:

ActiveSupport::ParameterFilter.new ENV_MATCH

Instance Method Summary collapse

Instance Method Details

#filtered_envObject

Returns a hash of request.env with all sensitive data replaced.



34
35
36
# File 'lib/action_dispatch/http/filter_parameters.rb', line 34

def filtered_env
  @filtered_env ||= env_filter.filter(@env)
end

#filtered_parametersObject

Returns a hash of parameters with all sensitive data replaced.



27
28
29
30
31
# File 'lib/action_dispatch/http/filter_parameters.rb', line 27

def filtered_parameters
  @filtered_parameters ||= parameter_filter.filter(parameters)
rescue ActionDispatch::Http::Parameters::ParseError
  @filtered_parameters = {}
end

#filtered_pathObject

Reconstructs a path with all sensitive GET parameters replaced.



39
40
41
# File 'lib/action_dispatch/http/filter_parameters.rb', line 39

def filtered_path
  @filtered_path ||= query_string.empty? ? path : "#{path}?#{filtered_query_string}"
end

#initializeObject



19
20
21
22
23
24
# File 'lib/action_dispatch/http/filter_parameters.rb', line 19

def initialize
  super
  @filtered_parameters = nil
  @filtered_env        = nil
  @filtered_path       = nil
end