diff options
author | Lukas Reschke <lukas@statuscode.ch> | 2021-07-21 11:18:35 +0200 |
---|---|---|
committer | Lukas Reschke <lukas@statuscode.ch> | 2021-07-21 22:00:32 +0200 |
commit | 0bca199b55f53d9b1e5675b86fa2b479f54da645 (patch) | |
tree | a97db059f5c62db95b99ac48ccf32892b1d4f1bc | |
parent | 3d1fb04351a21e9d098b093d2c85f91203ecc327 (diff) | |
download | nextcloud-server-0bca199b55f53d9b1e5675b86fa2b479f54da645.tar.gz nextcloud-server-0bca199b55f53d9b1e5675b86fa2b479f54da645.zip |
Sanitize more functions from the encryption app
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
-rw-r--r-- | lib/private/Log/ExceptionSerializer.php | 58 |
1 files changed, 57 insertions, 1 deletions
diff --git a/lib/private/Log/ExceptionSerializer.php b/lib/private/Log/ExceptionSerializer.php index 2cb99e1f55a..990b98f11fc 100644 --- a/lib/private/Log/ExceptionSerializer.php +++ b/lib/private/Log/ExceptionSerializer.php @@ -34,6 +34,13 @@ use OC\HintException; use OC\Security\IdentityProof\Key; use OC\Setup; use OC\SystemConfig; +use OCA\Encryption\Controller\RecoveryController; +use OCA\Encryption\Controller\SettingsController; +use OCA\Encryption\Crypto\Crypt; +use OCA\Encryption\Crypto\Encryption; +use OCA\Encryption\Hooks\UserHooks; +use OCA\Encryption\KeyManager; +use OCA\Encryption\Session; class ExceptionSerializer { public const methodsWithSensitiveParameters = [ @@ -118,7 +125,56 @@ class ExceptionSerializer { ], \RedisCluster::class => [ '__construct' - ] + ], + Crypt::class => [ + 'symmetricEncryptFileContent', + 'encrypt', + 'generatePasswordHash', + 'encryptPrivateKey', + 'decryptPrivateKey', + 'isValidPrivateKey', + 'symmetricDecryptFileContent', + 'checkSignature', + 'createSignature', + 'decrypt', + 'multiKeyDecrypt', + 'multiKeyEncrypt', + ], + RecoveryController::class => [ + 'adminRecovery', + 'changeRecoveryPassword' + ], + SettingsController::class => [ + 'updatePrivateKeyPassword', + ], + Encryption::class => [ + 'encrypt', + 'decrypt', + ], + KeyManager::class => [ + 'checkRecoveryPassword', + 'storeKeyPair', + 'setRecoveryKey', + 'setPrivateKey', + 'setFileKey', + 'setAllFileKeys', + ], + Session::class => [ + 'setPrivateKey', + 'prepareDecryptAll', + ], + \OCA\Encryption\Users\Setup::class => [ + 'setupUser', + ], + UserHooks::class => [ + 'login', + 'postCreateUser', + 'postDeleteUser', + 'prePasswordReset', + 'postPasswordReset', + 'preSetPassphrase', + 'setPassphrase', + ], ]; private function editTrace(array &$sensitiveValues, array $traceLine): array { |