Update main.go, consts.go, and 3 more files...

This commit is contained in:
RamiBerm 2021-05-31 09:58:12 +03:00
parent 5473f11215
commit 27c7d66478
4 changed files with 15 additions and 13 deletions

View File

@ -11,6 +11,7 @@ import (
"mizuserver/pkg/middleware"
"mizuserver/pkg/models"
"mizuserver/pkg/routes"
"mizuserver/pkg/sensitiveDataFiltering"
"mizuserver/pkg/tap"
"mizuserver/pkg/utils"
"os"
@ -103,9 +104,8 @@ func getTapTargets() []string {
}
func filterHarHeaders(inChannel <- chan *tap.OutputChannelItem, outChannel chan *tap.OutputChannelItem) {
for {
message := <- inChannel
utils.FilterSensitiveInfoFromHarRequest(message)
for message := range inChannel {
sensitiveDataFiltering.FilterSensitiveInfoFromHarRequest(message)
outChannel <- message
}
}

View File

@ -0,0 +1,10 @@
package sensitiveDataFiltering
const maskedFieldPlaceholderValue = "[REDACTED]"
//these values MUST be all lower case
var personallyIdentifiableDataFields = []string{"token", "authorization", "authentication", "cookie", "userid", "password",
"username", "user", "key", "passcode", "pass", "auth", "authtoken", "jwt",
"bearer", "clientid", "clientsecret", "redirecturi", "phonenumber",
"zip", "zipcode", "address", "country", "firstname", "lastname",
"middlename", "fname", "lname", "birthdate"}

View File

@ -1,4 +1,4 @@
package utils
package sensitiveDataFiltering
import (
"encoding/json"
@ -90,7 +90,7 @@ func filterJsonMap(jsonMap map[string] interface{}) {
func filterUrl(originalUrl string) string {
parsedUrl, err := url.Parse(originalUrl)
if err != nil {
return originalUrl
return fmt.Sprintf("http://%s", maskedFieldPlaceholderValue)
} else {
if len(parsedUrl.RawQuery) > 0 {
newQueryArgs := make([]string, 0)

View File

@ -1,8 +0,0 @@
package utils
const maskedFieldPlaceholderValue = "[REDACTED]"
var personallyIdentifiableDataFields = []string {"token", "authorization", "authentication", "cookie", "userid", "password",
"username", "user", "key", "passcode", "pass", "auth", "authtoken", "jwt",
"bearer", "clientid", "clientsecret", "redirecturi", "phonenumber",
"zip", "zipcode", "address", "country", "firstname", "lastname",
"middlename", "fname", "lname", "birthdate"}