#29714: Option to hide cookies in error reports
-------------------------------------+-------------------------------------
               Reporter:  Vasili     |          Owner:  (none)
  Korol                              |
                   Type:             |         Status:  new
  Uncategorized                      |
              Component:  Error      |        Version:  1.11
  reporting                          |       Keywords:  email, reports,
               Severity:  Normal     |  cookies
           Triage Stage:             |      Has patch:  0
  Unreviewed                         |
    Needs documentation:  0          |    Needs tests:  0
Patch needs improvement:  0          |  Easy pickings:  0
                  UI/UX:  0          |
-------------------------------------+-------------------------------------
 When `DEBUG=False`, and with the email settings configured, Django sends
 error reports to the addresses listed in the `ADMINS` setting. One can
 filter some sensitive data out from the report, but there is no option to
 filter out cookies. There is no information about this in the
 [https://docs.djangoproject.com/en/2.1/howto/error-reporting/ Howto].

 This may be important in the situations, when cookies scoped to the parent
 domain are included in the HTTP request - in this case such cookies will
 be dumped in the report, although they may be not related to the Django
 website at all.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/29714>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/050.6b39f858d63ce649efe57f08555e11bd%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to