Don't show the password in the debug log (#24)

add-ons · Dec 21, 2020 · 7535a92 · 7535a92
1 parent 5e0ade1
commit 7535a92
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/resources/lib/streamz/util.py b/resources/lib/streamz/util.py
@@ -143,7 +143,12 @@ def _request(method, url, params=None, form=None, data=None, token=None, profile
     :rtype: requests.Response
     """
     if form or data:
-        _LOGGER.debug('Sending %s %s: %s', method, url, form or data)
+        # Make sure we don't log the password
+        debug_data = dict()
+        debug_data.update(form or data)
+        if 'password' in debug_data:
+            debug_data['password'] = '**redacted**'
+        _LOGGER.debug('Sending %s %s: %s', method, url, debug_data)
     else:
         _LOGGER.debug('Sending %s %s', method, url)