Rails - Oct 2008 - rails and security

Hi,

I am wondering if there is a way to secure rails application logs ?

My issue is that I discovered that form parameters are shown in clear in
the logs. So when users are authenticating, you see the login and
password in clear

Processing LoginController#index (for xxxxx at 2008-10-16 11:22:43)
[POST]
  Session ID: 8cb95e2e50332added5715eff9e84938
  Parameters:
{"authenticity_token"=>"f2ccf4bf93a1a334e5b3ed227eef84e12fafbbf6",
"action"=>"index",
"controller"=>"login",
"password"=>"toto",
"login"=>"r386528"}

Is there any way to hide this ?
-- 
Posted via http://www.ruby-forum.com/.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

http://weblog.rubyonrails.org/2006/8/21/filtered-parameter-logging

Regards

MR Damien escribió:
> Hi,
>
> I am wondering if there is a way to secure rails application logs ?
>
> My issue is that I discovered that form parameters are shown in clear in
> the logs. So when users are authenticating, you see the login and
> password in clear
>
> Processing LoginController#index (for xxxxx at 2008-10-16 11:22:43)
> [POST]
>   Session ID: 8cb95e2e50332added5715eff9e84938
>   Parameters:
>
{"authenticity_token"=>"f2ccf4bf93a1a334e5b3ed227eef84e12fafbbf6",
> "action"=>"index",
"controller"=>"login",
"password"=>"toto",
> "login"=>"r386528"}
>
> Is there any way to hide this ?
>   
/**
 * dagi3d v4 - http://dagi3d.net
 */

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Borja Martín wrote:
> http://weblog.rubyonrails.org/2006/8/21/filtered-parameter-logging
> 
> Regards
> 
That worked, thanks !
-- 
Posted via http://www.ruby-forum.com/.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---