From 5f37baed48714b0d5b58b784d8887f02a3900edb Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Wed, 29 Jun 2016 19:49:12 -0500
Subject: Omit <secret> tags from L2TP in status.php config.xml dump.

---
 src/usr/local/www/status.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php
index e2708c4..abc120c 100755
--- a/src/usr/local/www/status.php
+++ b/src/usr/local/www/status.php
@@ -107,6 +107,7 @@ function doCmdT($title, $command) {
 				$line = fgets($fd);
 				/* remove sensitive contents */
 				$line = preg_replace("/<authorizedkeys>.*?<\\/authorizedkeys>/", "<authorizedkeys>xxxxx</authorizedkeys>", $line);
+				$line = preg_replace("/<secret>.*?<\\/secret>/", "<secret>xxxxx</secret>", $line);
 				$line = preg_replace("/<bcrypt-hash>.*?<\\/bcrypt-hash>/", "<bcrypt-hash>xxxxx</bcrypt-hash>", $line);
 				$line = preg_replace("/<password>.*?<\\/password>/", "<password>xxxxx</password>", $line);
 				$line = preg_replace("/<pre-shared-key>.*?<\\/pre-shared-key>/", "<pre-shared-key>xxxxx</pre-shared-key>", $line);
-- 
cgit v1.1