summaryrefslogtreecommitdiff
path: root/packages/backend/src
diff options
context:
space:
mode:
authorMarie <github@yuugi.dev>2025-06-14 16:16:58 +0000
committerMarie <github@yuugi.dev>2025-06-14 16:16:58 +0000
commitf58badade87de9e59329cc926d0de717967bd062 (patch)
tree3fcee705cb2e8b9c07f7df381d052f745ada3fa4 /packages/backend/src
parentmerge: Fix broken CSS in instance-info (!1118) (diff)
parenthide admin secrets from the mod log (diff)
downloadsharkey-f58badade87de9e59329cc926d0de717967bd062.tar.gz
sharkey-f58badade87de9e59329cc926d0de717967bd062.tar.bz2
sharkey-f58badade87de9e59329cc926d0de717967bd062.zip
merge: Hide admin secrets from the mod log (resolves #44) (!1120)
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/1120 Closes #44 Approved-by: dakkar <dakkar@thenautilus.net> Approved-by: Marie <github@yuugi.dev>
Diffstat (limited to 'packages/backend/src')
-rw-r--r--packages/backend/src/server/api/endpoints/admin/update-meta.ts24
1 files changed, 22 insertions, 2 deletions
diff --git a/packages/backend/src/server/api/endpoints/admin/update-meta.ts b/packages/backend/src/server/api/endpoints/admin/update-meta.ts
index 7c3d485a0f..4970d28cfa 100644
--- a/packages/backend/src/server/api/endpoints/admin/update-meta.ts
+++ b/packages/backend/src/server/api/endpoints/admin/update-meta.ts
@@ -778,9 +778,29 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
const after = await this.metaService.fetch(true);
this.moderationLogService.log(me, 'updateServerSettings', {
- before,
- after,
+ before: sanitize(before),
+ after: sanitize(after),
});
});
}
}
+
+function sanitize(meta: Partial<MiMeta>): Partial<MiMeta> {
+ return {
+ ...meta,
+ hcaptchaSecretKey: '<redacted>',
+ mcaptchaSecretKey: '<redacted>',
+ recaptchaSecretKey: '<redacted>',
+ turnstileSecretKey: '<redacted>',
+ fcSecretKey: '<redacted>',
+ smtpPass: '<redacted>',
+ swPrivateKey: '<redacted>',
+ objectStorageAccessKey: '<redacted>',
+ objectStorageSecretKey: '<redacted>',
+ deeplAuthKey: '<redacted>',
+ libreTranslateKey: '<redacted>',
+ verifymailAuthKey: '<redacted>',
+ truemailAuthKey: '<redacted>',
+ };
+}
+