#18379: sensitive_variables handling fails for methods
-----------------------------------------+------------------------
               Reporter:  gabrielhurley  |          Owner:  nobody
                   Type:  Bug            |         Status:  new
              Component:  Core (Other)   |        Version:  1.4
               Severity:  Normal         |       Keywords:
           Triage Stage:  Unreviewed     |      Has patch:  0
    Needs documentation:  0              |    Needs tests:  0
Patch needs improvement:  0              |  Easy pickings:  0
                  UI/UX:  0              |
-----------------------------------------+------------------------
 When attempting to decorate a class method with the "sensitive_variables"
 decorator (both with and without the "method_decorator" decorator) the
 expectation is that the variables will be properly filtered out.

 However, that is not the case due to this line:
 https://github.com/django/django/blob/master/django/views/debug.py#L159

 Since methods do not live in the global namespace, they're not found, and
 thereby the sensitive_variable stripping is bypassed.

 This is non-obvious behavior and should either be documented or fixed to
 behave as expected.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/18379>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to