** No longer affects: neutron

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1516691

Title:
  neutronclient logs sensitive info in http requests

Status in python-neutronclient:
  New

Bug description:
  neutronclient logs sensitive info in headers when logging http
  requests in debug mode.

  /usr/lib/python2.7/site-
  packages/neutronclient/common/utils.py:http_log_req()

  neutronclient should hash sensitive info in headers such as 'X-Auth-Token' 
and 'X-Subject-Token'.
  For examples, see keystoneclient 
(https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/openstack/common/apiclient/client.py#L105),
 glanceclient, or ceilometerclient.

To manage notifications about this bug go to:
https://bugs.launchpad.net/python-neutronclient/+bug/1516691/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to