summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2016-05-06 01:53:07 -0500
committerChris Buechler <cmb@pfsense.org>2016-05-06 01:54:46 -0500
commit4bb398108bd8f17badd263eb4f20dd057373116d (patch)
tree1fb2275d6b362a41a1fd62571cc583260b998d10
parent0972379a34651d63b234fcf965b9dc2901fbcf93 (diff)
downloadpfsense-4bb398108bd8f17badd263eb4f20dd057373116d.zip
pfsense-4bb398108bd8f17badd263eb4f20dd057373116d.tar.gz
Add authorizedkeys to exclusion in status.php, and fix. While these are public keys and hence not sensitive, they're also of no diagnostic value. Suggested-by: Denny Page
-rwxr-xr-xsrc/usr/local/www/status.php3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php
index 018689e..e2708c4 100755
--- a/src/usr/local/www/status.php
+++ b/src/usr/local/www/status.php
@@ -106,7 +106,8 @@ function doCmdT($title, $command) {
while (!feof($fd)) {
$line = fgets($fd);
/* remove sensitive contents */
- $line = preg_replace("/<bcrypt-hash>.*?</bcrypt-hash>/", "<bcrypt-hash>xxxxx</bcrypt-hash>", $line);
+ $line = preg_replace("/<authorizedkeys>.*?<\\/authorizedkeys>/", "<authorizedkeys>xxxxx</authorizedkeys>", $line);
+ $line = preg_replace("/<bcrypt-hash>.*?<\\/bcrypt-hash>/", "<bcrypt-hash>xxxxx</bcrypt-hash>", $line);
$line = preg_replace("/<password>.*?<\\/password>/", "<password>xxxxx</password>", $line);
$line = preg_replace("/<pre-shared-key>.*?<\\/pre-shared-key>/", "<pre-shared-key>xxxxx</pre-shared-key>", $line);
$line = preg_replace("/<rocommunity>.*?<\\/rocommunity>/", "<rocommunity>xxxxx</rocommunity>", $line);
OpenPOWER on IntegriCloud