本文介绍了从Rails日志中过滤部分或全部请求URL的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述 29岁程序员，3月因学历无情被辞！ Rails提供了filter_parameter_logging来过滤rails日志中的敏感参数。 如果您有一个JSONP API，则URL中可能存在一些敏感信息。有没有一种方法可以从日志中过滤请求的URLS？ 解决方案 是让它在Rails 2.x〜> 3.0上工作的方法。从Rails 3.1开始，如果你设置 config.filter_parameters ，Rails也会过滤掉查询字符串中的敏感参数。详情请参阅此提交。 我认为在这种情况下，您需要在 complete_request_uri .com / rails / rails / blob / bfe032858077bb2946abe25e95e485ba6da86bd5 / actionpack / lib / action_controller / base.rb＃L1384rel =nofollow noreferrer> ActionController :: Base ，因为 ActionController :: Benchmarking 调用该方法并打印如下所示的行： 完成于171ms（查看：35，DB：7）| 200 OK [http：// localhost：3000 /] 重写这个方法 pre code> class ActionController :: Base private def complete_request_uri ＃{request.protocol}＃{request.host}＃{request.request_uri.gsub（/ secret =（[a-z0-9] +）/ i，secret = [FILTERTED]）} end end 请注意，您需要使用正则表达式来玩一下它取代你想要的部分。 Rails provides filter_parameter_logging to filter sensitive parameters from the rails log.If you have a a JSONP API, some sensitive information could be present in the URL. Is there a way to filter request URLS from the log also? 解决方案 Note: The answer here was the way to get it work on Rails 2.x ~> 3.0. Starting from Rails 3.1, if you set config.filter_parameters, Rails will filter out the sensitive parameter in the query string as well. See this commit for more detail.I think in that case, you need to override complete_request_uri in ActionController::Base, since ActionController::Benchmarking calls that method and prints the line that looks like:Completed in 171ms (View: 35, DB: 7) | 200 OK [http://localhost:3000/]I think you can put this in initializer to override this methodclass ActionController::Base private def complete_request_uri "#{request.protocol}#{request.host}#{request.request_uri.gsub(/secret=([a-z0-9]+)/i, "secret=[FILTERTED]")}" endendNote that you need to play a bit with regular expression to make it substitute the portion you wanted. 这篇关于从Rails日志中过滤部分或全部请求URL的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！ 上岸，阿里云！
