fix(core): Redact csrfSecret when returning oauth credentials to the frontend (#10075)

This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™
2024-07-16 18:09:56 +02:00
committed by GitHub
parent 68d5d7e2e9
commit 48f047ee2e
2 changed files with 71 additions and 1 deletions

View File

@@ -407,7 +407,7 @@ export class CredentialsService {
for (const dataKey of Object.keys(copiedData)) {
// The frontend only cares that this value isn't falsy.
if (dataKey === 'oauthTokenData') {
if (dataKey === 'oauthTokenData' || dataKey === 'csrfSecret') {
if (copiedData[dataKey].toString().length > 0) {
copiedData[dataKey] = CREDENTIAL_BLANKING_VALUE;
} else {