Hide password in debug output of key request
This commit is contained in:
Adomas Venčkauskas 2015-12-20 13:46:47 +00:00
parent cfee7ea9d2
commit 8e0e86e59c

View file

@ -109,6 +109,7 @@ Zotero.HTTP = new function() {
if (options.body && typeof options.body == 'string') {
var bodyStart = options.body.substr(0, 1024);
// Don't display sync password or session id in console
bodyStart = bodyStart.replace(/password":"[^"]+/, 'password":"********');
bodyStart = bodyStart.replace(/password=[^&]+/, 'password=********');
bodyStart = bodyStart.replace(/sessionid=[^&]+/, 'sessionid=********');