Karmabunny / sprout3

SproutCMS: content management and framework
http://getsproutcms.com
GNU General Public License v2.0
24 stars 3 forks source link

Feat/secrets sanitizer #70

Closed gwillz closed 1 year ago

gwillz commented 1 year ago

~I'm already thinking this should live somewhere else, like kbphp.~ already done!

Basically a generic little something so we can stop recording keys and bits into log files.

Concept

The key pattern will pick up most of the troublesome things. But the values matcher is kind of great if a secret ends up somewhere unexpected.

The values matcher is based on a new industry movement to prefix secrets with identifiable things. We can also match obvious things like RSA key headers or JWT bits. Exciting stuff.

Tests

Unit tests are part of kbphp. Passing.