zydronium/websitepanel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Anonymous password and ftp account passwords are hidden in the output trace file.

Browse source
This commit is contained in:
alexY2004 2015-05-22 15:08:25 +03:00
parent 5fc61f26c5
commit 1734cf4c2c
1 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

17
WebsitePanel/Sources/WebsitePanel.EnterpriseServer.Code/Common/RestrictedTraceAssertion.cs
View file

@ -112,6 +112,15 @@ namespace WebsitePanel.EnterpriseServer
filename = file;
}
void stripContent(XmlElement el, String tagName)
{
XmlNodeList passwords = el.GetElementsByTagName(tagName);
for (int i = 0; i < passwords.Count; ++i)
{
XmlNode node = passwords.Item(i);
node.InnerXml = "*****";
}
}
public override SoapFilterResult ProcessMessage(SoapEnvelope envelope)
{
XmlDocument dom = null;
@ -137,12 +146,16 @@ namespace WebsitePanel.EnterpriseServer
}
XmlNode newNode = dom.ImportNode(envelope.DocumentElement, true);
XmlNodeList passwords = (newNode as XmlElement).GetElementsByTagName("password");
XmlElement el = newNode as XmlElement;
stripContent(el, "password");
stripContent(el, "Password");
stripContent(el, "AnonymousUserPassword");
/* XmlNodeList passwords = (newNode as XmlElement).GetElementsByTagName("password");
for (int i = 0; i < passwords.Count; ++i)
{
XmlNode node = passwords.Item(i);
node.InnerXml = "*****";
}
} */
rootNode.AppendChild(newNode);