OwlCyberSecurity - MANAGER
Edit File: scrubber.cpython-312.pyc
� G��g; � �p � d dl mZmZmZ d dlmZmZmZmZ er d dl m Z d dlm Z g d�Z g d�Z G d� d� Zy ) � )�capture_internal_exceptions�AnnotatedValue�iter_event_frames)� TYPE_CHECKING�cast�List�Dict)�Event)�Optional) �password�passwd�secret�api_key�apikey�auth� credentials� mysql_pwd� privatekey� private_key�token�session� csrftoken� sessionid� x_csrftoken�x_forwarded_for� set_cookie�cookie� authorization� x_api_key�aiohttp_sessionz connect.sid� csrf_token�csrf�_csrf� _csrf_token� PHPSESSID�_session�symfony� user_session�_xsrfz XSRF-TOKEN)r � x_real_ip� ip_address� remote_addrc �L � e Zd Z d d�Zd� Zd� Zd� Zd� Zd� Zd� Z d � Z d � Z d � Z y) � EventScrubberNc � � |�t j � n|| _ |s-|�t j � n|}| xj |z c_ | j D �cg c] }|j � �� c}| _ || _ yc c}w )a A scrubber that goes through the event payload and removes sensitive data configured through denylists. :param denylist: A security denylist that is always scrubbed, defaults to DEFAULT_DENYLIST. :param recursive: Whether to scrub the event payload recursively, default False. :param send_default_pii: Whether pii is sending is on, pii fields are not scrubbed. :param pii_denylist: The denylist to use for scrubbing when pii is not sent, defaults to DEFAULT_PII_DENYLIST. N)�DEFAULT_DENYLIST�copy�denylist�DEFAULT_PII_DENYLIST�lower� recursive)�selfr2 r5 �send_default_pii� pii_denylist�xs �B/opt/hc_python/lib/python3.12/site-packages/sentry_sdk/scrubber.py�__init__zEventScrubber.__init__> st � � 4<�3C�(�-�-�/��� � �/;�/C�$�)�)�+� � � �M�M�\� )�M�,0�M�M�:�M�q�����M�:�� �"���� ;s �Bc �x � t |t � sy|D ]$ }| j |� | j |� �& y)a* If a list is passed to this method, the method recursively searches the list and any nested lists for any dictionaries. The method calls scrub_dict on all dictionaries it finds. If the parameter passed to this method is not a list, the method does nothing. N)� isinstance�list� scrub_dict� scrub_list)r6 �lst�vs r: r@ zEventScrubber.scrub_listU s3 � � �#�t�$� ��A� �O�O�A� � �O�O�A� � � c �< � t |t � sy|j � D ]x \ }}t |t � r4|j � | j v rt j � ||< �J| j s�W| j |� | j |� �z y)a[ If a dictionary is passed to this method, the method scrubs the dictionary of any sensitive data. The method calls itself recursively on any nested dictionaries ( including dictionaries nested in lists) if self.recursive is True. This method does nothing if the parameter passed to it is not a dictionary. N) r= �dict�items�strr4 r2 r �+substituted_because_contains_sensitive_datar5 r? r@ )r6 �d�krB s r: r? zEventScrubber.scrub_dictd ss � � �!�T�"� ��G�G�I�D�A�q� �!�S�!�a�g�g�i�4�=�=�&@�%�Q�Q�S��!��� � �����"�����"� rC c � � t � 5 d|v rZd|d v r| j |d d � d|d v r| j |d d � d|d v r| j |d d � d d d � y # 1 sw Y y xY w)N�request�headers�cookies�data�r r? �r6 �events r: � scrub_requestzEventScrubber.scrub_requestx s� � � (� *��E�!� ��i� 0�0��O�O�E�)�$4�Y�$?�@� ��i� 0�0��O�O�E�)�$4�Y�$?�@��U�9� -�-��O�O�E�)�$4�V�$<�=� +� *� *�s �A A3�3A<c �r � t � 5 d|v r| j |d � d d d � y # 1 sw Y y xY w)N�extrarP rQ s r: � scrub_extrazEventScrubber.scrub_extra� s, � � (� *��%� �����g��/� +� *� *�� �-�6c �r � t � 5 d|v r| j |d � d d d � y # 1 sw Y y xY w)N�userrP rQ s r: � scrub_userzEventScrubber.scrub_user� s+ � � (� *��������f� �.� +� *� *�rW c � � t � 5 d|v r-d|d v r&|d d D ] }d|v s�| j |d � � d d d � y # 1 sw Y y xY w)N� breadcrumbs�valuesrO rP )r6 rR �values r: �scrub_breadcrumbsz EventScrubber.scrub_breadcrumbs� sU � � (� *� ��%��u�]� 3�3�!&�}�!5�h�!?��!�U�?� �O�O�E�&�M� :� "@� +� *� *�s �A�A�Ac � � t � 5 t |� D ] }d|v s�| j |d � � d d d � y # 1 sw Y y xY w)N�vars)r r r? )r6 rR �frames r: � scrub_frameszEventScrubber.scrub_frames� s: � � (� *�*�5�1���U�?��O�O�E�&�M�2� 2� +� *� *�s �?�?�Ac �� � t � 5 d|v rEt t t t t f |d � D ] }d|v s�| j |d � � d d d � y # 1 sw Y y xY w)N�spansrO )r r r r rG �objectr? )r6 rR �spans r: � scrub_spanszEventScrubber.scrub_spans� sW � � (� *��%� � ��d�3��;�&7�!8�%��.� I�D� ��~� ����V� �5� J� +� *� *�s �3A �A � A'c �� � | j |� | j |� | j |� | j |� | j |� | j |� y )N)rS rV rZ r_ rc rh rQ s r: � scrub_eventzEventScrubber.scrub_event� sT � � ���5�!� ���� � ���� � � � �u�%� ���%� � ���� rC )NFFN) �__name__� __module__� __qualname__r; r@ r? rS rV rZ r_ rc rh rj � rC r: r. r. = s7 � �SW�#�. � #�( >�0� /� ;�3�6� rC r. N)�sentry_sdk.utilsr r r �typingr r r r �sentry_sdk._typesr r r0 r3 r. rn rC r: �<module>rr s= ��� � 3� 2��'� �%� �N� �q � q rC