Merge pull request #48947 from nextcloud/bugfix/noid/mark-more-config…

…s-as-sensitive fix(config): Mark more configs as sensitive
nextcloud · Oct 28, 2024 · 8e6fd4d · 8e6fd4d
2 parents 988b600 + 1e5cb82
commit 8e6fd4d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/lib/private/AppConfig.php b/lib/private/AppConfig.php
@@ -1430,10 +1430,16 @@ private function getSensitiveKeys(string $app): array {
 				'/^key_pairs$/',
 				'/^local_gskey$/',
 			],
+			'call_summary_bot' => [
+				'/^secret_(.*)$/',
+			],
 			'external' => [
 				'/^sites$/',
 				'/^jwt_token_privkey_(.*)$/',
 			],
+			'globalsiteselector' => [
+				'/^gss\.jwt\.key$/',
+			],
 			'integration_discourse' => [
 				'/^private_key$/',
 				'/^public_key$/',
@@ -1534,6 +1540,9 @@ private function getSensitiveKeys(string $app): array {
 			'user_saml' => [
 				'/^idp-x509cert$/',
 			],
+			'whiteboard' => [
+				'/^jwt_secret_key$/',
+			],
 		];
 
 		return $sensitiveValues[$app] ?? [];

diff --git a/lib/private/SystemConfig.php b/lib/private/SystemConfig.php
@@ -107,6 +107,7 @@ class SystemConfig {
 		'onlyoffice' => [
 			'jwt_secret' => true,
 		],
+		'PASS' => true,
 	];
 
 	public function __construct(