Contents

module ActiveRecord
  module PGCrypto
    # Subscribes to the logger and obfuscates the sensitive queries.
    module LogSubscriber
      REGEXP = \
        /(\(*)(?<operation>pgp_sym_(decrypt|encrypt)_bytea)(\(+.*\)+)/im.freeze
      PLACEHOLDER = '[FILTERED]'.freeze

      # Scrubs the log event from any sensitive SQL
      #
      # @return [NilClass]
      def sql(event)
        scrubbed_sql = event.payload[:sql].gsub(REGEXP) do |_|
          "#{$LAST_MATCH_INFO[:operation]}(#{PLACEHOLDER})"
        end

        event.payload[:sql] = scrubbed_sql

        super(event)
      end
    end
  end
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
active_record-pgcrypto-0.2.4	lib/active_record/pgcrypto/log_subscriber.rb
active_record-pgcrypto-0.2.3	lib/active_record/pgcrypto/log_subscriber.rb
active_record-pgcrypto-0.2.2	lib/active_record/pgcrypto/log_subscriber.rb
active_record-pgcrypto-0.2.1	lib/active_record/pgcrypto/log_subscriber.rb
active_record-pgcrypto-0.2.0	lib/active_record/pgcrypto/log_subscriber.rb
active_record-pgcrypto-0.1.1	lib/active_record/pgcrypto/log_subscriber.rb