mirror of
https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git
synced 2025-12-18 02:21:13 +00:00
fix(core): Redact csrfSecret when returning oauth credentials to the frontend (#10075)
This commit is contained in:
committed by
GitHub
parent
68d5d7e2e9
commit
48f047ee2e
@@ -407,7 +407,7 @@ export class CredentialsService {
|
||||
|
||||
for (const dataKey of Object.keys(copiedData)) {
|
||||
// The frontend only cares that this value isn't falsy.
|
||||
if (dataKey === 'oauthTokenData') {
|
||||
if (dataKey === 'oauthTokenData' || dataKey === 'csrfSecret') {
|
||||
if (copiedData[dataKey].toString().length > 0) {
|
||||
copiedData[dataKey] = CREDENTIAL_BLANKING_VALUE;
|
||||
} else {
|
||||
|
||||
Reference in New Issue
Block a user