www

commit 84a6ea18f6d70df847c8a13224e0a25e63c9b0d1
parent cfee7ea9d20d14c5ae5dc6008cee27189576a5a2
Author: Dan Stillman <dstillman@zotero.org>
Date:   Sun, 20 Dec 2015 11:45:36 -0500

Merge pull request #887 from adomasven/fix/hide-password-in-debug-output

Hide password in debug output of key request
Diffstat:
M
chrome/content/zotero/xpcom/http.js
 | 
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/chrome/content/zotero/xpcom/http.js b/chrome/content/zotero/xpcom/http.js
@@ -109,6 +109,7 @@ Zotero.HTTP = new function() {
 		if (options.body && typeof options.body == 'string') {
 			var bodyStart = options.body.substr(0, 1024);
 			// Don't display sync password or session id in console
+			bodyStart = bodyStart.replace(/password":"[^"]+/, 'password":"********');
 			bodyStart = bodyStart.replace(/password=[^&]+/, 'password=********');
 			bodyStart = bodyStart.replace(/sessionid=[^&]+/, 'sessionid=********');