Hi,

AFAIU, SafeExceptionReporterFilter takes care of removing any sensitive data from logs. However, I today realized that this does not cover session cookies.

In a ticket about this issue[1] it was treated not as a security issue but more as a request for customization. That puzzled me a bit. Why are session cookies not treated as sensitive, just like passwords are?

thanks,
tobias


[1]: https://code.djangoproject.com/ticket/29714

--
You received this message because you are subscribed to the Google Groups "Django 
developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/6715b8e0-e38a-ac36-50fa-b343b09e1393%40posteo.de.

Reply via email to