Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix regex for filtering credentials from logs #106

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

starsirius
Copy link

The ending "=" character of a base64 encoded string is padding. When the input length is a multiple of three (which is the case for our account id and license key pair), the output would not have the padding character. This results in our credentials not being filtered in the logs.

This fixes the regex by removing the incorrect assumption.

@starsirius starsirius changed the title fix: fix regex for filtering credentials from logs Fix regex for filtering credentials from logs Aug 11, 2021
@starsirius
Copy link
Author

Looks like CI is no longer running and will need to migrate from travis-ci.org to travis-ci.com.

@starsirius starsirius force-pushed the fix-logging-credentials branch 2 times, most recently from 6d94c28 to bb25e4d Compare August 12, 2021 13:47
@starsirius
Copy link
Author

@shilpakhanal I see you are the most recent contributor to this project. We're in the process of integrating the SDK with our app. Do you mind helping us get this PR reviewed and hopefully merged (or directing us to the right person/process)? Thank you! 🙏

Update AvaTax to the latest version
The ending "=" character of a base64 encoded string is padding. When the
input length is a multiple of three (which is the case for our account
id and license key), the output would not have the padding character.
This results in our credentials not being filtered in the logs.

This fixes the regex by removing the incorrect assumption.

https://en.wikipedia.org/wiki/Base64#Output_padding
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant