Browse Source

ref(admin): Dont' show `TOKEN` secrets in InternalEnvironmentEndpoint (#35232)

Evan Purkhiser 2 years ago
parent
commit
f332c4ec48
1 changed files with 1 additions and 1 deletions
  1. 1 1
      src/sentry/api/endpoints/internal/environment.py

+ 1 - 1
src/sentry/api/endpoints/internal/environment.py

@@ -13,7 +13,7 @@ class InternalEnvironmentEndpoint(Endpoint):
     permission_classes = (SuperuserPermission,)
 
     def get(self, request: Request) -> Response:
-        reserved = ("PASSWORD", "SECRET", "KEY")
+        reserved = ("PASSWORD", "SECRET", "KEY", "TOKEN")
         config = []
         for k in sorted(dir(settings)):
             v_repr = repr(getattr(settings, k))