Don't log urlencoded access_tokens

2016-01-08 17:48:08 +00:00 · 2016-01-08 17:48:08 +00:00 · 8f8b884430
parent 33bef689c1
commit 8f8b884430
1 changed files with 2 additions and 2 deletions
--- a/synapse/app/homeserver.py
+++ b/synapse/app/homeserver.py
@ -496,8 +496,8 @@ class SynapseRequest(Request):

    def get_redacted_uri(self):
        return re.sub(
-            r'(\?.*access_token=)[^&]*(.*)$',
-            r'\1<redacted>\2',
+            r'(\?.*accesss(_|%5[Ff])token=)[^&]*(.*)$',
+            r'\1<redacted>\3',
            self.uri
        )