rainysy/netbird
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[client] Mask sensitive data in debug bundle creation (#6364)

Browse Source 
* [client] Mask sensitive data in debug bundle creation

* Avoid nil reference in turn and use masked constant
This commit is contained in:
Maycon Santos
2026-06-08 13:17:04 +02:00
committed by GitHub
parent 1e7b16db0a
commit 60d2fa08b0
1 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
client/internal/debug/debug.go
View File

@@ -806,6 +806,8 @@ func (g *BundleGenerator) addSyncResponse() error {
AllowPartial: true, AllowPartial: true,
} }
g.maskSecrets()
jsonBytes, err := options.Marshal(g.syncResponse) jsonBytes, err := options.Marshal(g.syncResponse)
if err != nil { if err != nil {
return fmt.Errorf("generate json: %w", err) return fmt.Errorf("generate json: %w", err)
@@ -818,6 +820,27 @@ func (g *BundleGenerator) addSyncResponse() error {
return nil return nil
} }
func (g *BundleGenerator) maskSecrets() {
if g.syncResponse == nil || g.syncResponse.NetbirdConfig == nil {
return
}
if g.syncResponse.NetbirdConfig.Flow != nil {
g.syncResponse.NetbirdConfig.Flow.TokenPayload = maskedValue
}
if g.syncResponse.NetbirdConfig.Relay != nil {
g.syncResponse.NetbirdConfig.Relay.TokenPayload = maskedValue
}
for i := range g.syncResponse.NetbirdConfig.Turns {
if g.syncResponse.NetbirdConfig.Turns[i] != nil {
g.syncResponse.NetbirdConfig.Turns[i].Password = maskedValue
}
}
}
func (g *BundleGenerator) addStateFile() error { func (g *BundleGenerator) addStateFile() error {
sm := profilemanager.NewServiceManager("") sm := profilemanager.NewServiceManager("")
path := sm.GetStatePath() path := sm.GetStatePath()