Strip sensitive key information from API Access Logs

This commit is contained in:
2011-05-31 13:16:17 +01:00
parent d5fd90cb5b
commit ded43d563f

View File

@@ -100,7 +100,9 @@ class CachedDocumentManager(models.Manager):
except:
pass
else:
ApiAccessLog(userid=v, service='Unknown', time_access=doc.time_retrieved, document=url).save()
for k in ['userid', 'apikey', 'vcode', 'keyid']:
if k in params: del params[k]
ApiAccessLog(userid=v, service='Unknown', time_access=doc.time_retrieved, document=self.construct_url(url_path, params)).save()
return doc