cloud-py-api / app_api

Nextcloud AppAPI
https://apps.nextcloud.com/apps/app_api
GNU Affero General Public License v3.0
57 stars 5 forks source link

secrets appear on errors in logfile #261

Closed bigcat88 closed 2 months ago

bigcat88 commented 2 months ago

With PHP>=8.2 they will appear like this:

/var/www/html/apps-extra/app_api/lib/Service/AppAPIService.php
line 89
OCA\AppAPI\Service\AppAPIService->requestToExAppInternal(
  [
    "OCA\\AppAPI\\Db\\ExApp",
    3
  ],
  "POST",
  "http://host.docker.internal:9031/video_to_gif",
  [
    "SensitiveParameterValue"
  ]
)

Also adjustments in the Nextcloud Server required, to hide headers in IClient calls, we cannot do it from AppAPI side.