Skip to content

Commit 7358694

Browse files
authored
Add more sensitive HTTP headers (#1008)
1 parent 75290c7 commit 7358694

File tree

1 file changed

+26
-1
lines changed

1 file changed

+26
-1
lines changed

interfaces.go

Lines changed: 26 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -214,11 +214,36 @@ type Request struct {
214214
}
215215

216216
var sensitiveHeaders = map[string]struct{}{
217+
"_csrf": {},
218+
"_csrf_token": {},
219+
"_session": {},
220+
"_xsrf": {},
221+
"Api-Key": {},
222+
"Apikey": {},
223+
"Auth": {},
217224
"Authorization": {},
218-
"Proxy-Authorization": {},
219225
"Cookie": {},
226+
"Credentials": {},
227+
"Csrf": {},
228+
"Csrf-Token": {},
229+
"Csrftoken": {},
230+
"Ip-Address": {},
231+
"Passwd": {},
232+
"Password": {},
233+
"Private-Key": {},
234+
"Privatekey": {},
235+
"Proxy-Authorization": {},
236+
"Remote-Addr": {},
237+
"Secret": {},
238+
"Session": {},
239+
"Sessionid": {},
240+
"Token": {},
241+
"User-Session": {},
242+
"X-Api-Key": {},
243+
"X-Csrftoken": {},
220244
"X-Forwarded-For": {},
221245
"X-Real-Ip": {},
246+
"XSRF-TOKEN": {},
222247
}
223248

224249
// NewRequest returns a new Sentry Request from the given http.Request.

0 commit comments

Comments
 (0)