fix regexp for log redaction to actually redact AS access_tokens etc

2025-12-05 01:10:13 +00:00 · 2017-10-09 18:17:42 +01:00
1 changed files with 1 additions and 1 deletions
--- a/synapse/http/site.py
+++ b/synapse/http/site.py
@@ -20,7 +20,7 @@ import logging
 import re
 import time

-ACCESS_TOKEN_RE = re.compile(r'(\?.*access(_|%5[Ff])token=)[^&]*(.*)$')
+ACCESS_TOKEN_RE = re.compile(r'(\?\S*?access(_|%5[Ff])token=).*?(&|\s|$)')


 class SynapseRequest(Request):