�
_�*j� � �p � d dl mZmZmZmZ d dlmZmZmZ er d dl m Z d dl
m Z g d�Z g d�Z
G d� d� Zy )
� )�
TYPE_CHECKING�Dict�List�cast)�AnnotatedValue�capture_internal_exceptions�iter_event_frames)�Optional)�Event)!�password�passwd�secret�api_key�apikey�auth� credentials� mysql_pwd�
privatekey� private_key�token�session� csrftoken� sessionid� x_csrftoken�x_forwarded_for�
set_cookie�cookie�
authorizationzproxy-authorization� x_api_key�aiohttp_sessionz connect.sid�
csrf_token�csrf�_csrf� _csrf_token� PHPSESSID�_session�symfony� user_session�_xsrfz
XSRF-TOKEN)r � x_real_ip�
ip_address� remote_addrc � � e Zd Z ddddededdddf
d�Zd eddfd
�Zd eddfd �Zdd
�Zdd�Z dd�Z
dd�Z dd�Z dd�Z
dd�Zy)�
EventScrubberN�denylistzOptional[List[str]]� recursive�send_default_pii� pii_denylist�returnc � � |�t j � n|| _ |s-|�t j � n|}| xj |z
c_ | j D �cg c] }|j � �� c}| _ || _ yc c}w )a
A scrubber that goes through the event payload and removes sensitive data configured through denylists.
:param denylist: A security denylist that is always scrubbed, defaults to DEFAULT_DENYLIST.
:param recursive: Whether to scrub the event payload recursively, default False.
:param send_default_pii: Whether pii is sending is on, pii fields are not scrubbed.
:param pii_denylist: The denylist to use for scrubbing when pii is not sent, defaults to DEFAULT_PII_DENYLIST.
N)�DEFAULT_DENYLIST�copyr/ �DEFAULT_PII_DENYLIST�lowerr0 )�selfr/ r0 r1 r2 �xs �B/opt/hc_python/lib/python3.12/site-packages/sentry_sdk/scrubber.py�__init__zEventScrubber.__init__@ st � � 4<�3C�(�-�-�/���
� �/;�/C�$�)�)�+� �
�
�M�M�\� )�M�,0�M�M�:�M�q�����M�:��
�"���� ;s �B�lstc �x � t |t � sy|D ]$ }| j |� | j |� �& y)a*
If a list is passed to this method, the method recursively searches the list and any
nested lists for any dictionaries. The method calls scrub_dict on all dictionaries
it finds.
If the parameter passed to this method is not a list, the method does nothing.
N)�
isinstance�list�
scrub_dict�
scrub_list)r9 r= �vs r; rB zEventScrubber.scrub_listZ s3 � � �#�t�$� ��A� �O�O�A� � �O�O�A� � � �dc �< � t |t � sy|j � D ]x \ }}t |t � r4|j � | j
v rt
j � ||< �J| j s�W| j |� | j |� �z y)a[
If a dictionary is passed to this method, the method scrubs the dictionary of any
sensitive data. The method calls itself recursively on any nested dictionaries (
including dictionaries nested in lists) if self.recursive is True.
This method does nothing if the parameter passed to it is not a dictionary.
N) r? �dict�items�strr8 r/ r �+substituted_because_contains_sensitive_datar0 rA rB )r9 rE �krC s r; rA zEventScrubber.scrub_dicth ss � � �!�T�"� ��G�G�I�D�A�q� �!�S�!�a�g�g�i�4�=�=�&@�%�Q�Q�S��!��� � �����"�����"� rD c � � t � 5 d|v rZd|d v r| j |d d � d|d v r| j |d d � d|d v r| j |d d � d d d � y # 1 sw Y y xY w)N�request�headers�cookies�data�r rA �r9 �events r; �
scrub_requestzEventScrubber.scrub_request{ s� � �
(�
*��E�!� ��i� 0�0��O�O�E�)�$4�Y�$?�@� ��i� 0�0��O�O�E�)�$4�Y�$?�@��U�9� -�-��O�O�E�)�$4�V�$<�=� +�
*�
*�s �A A3�3A<c �r � t � 5 d|v r| j |d � d d d � y # 1 sw Y y xY w)N�extrarQ rR s r; � scrub_extrazEventScrubber.scrub_extra� s, � �
(�
*��%� �����g��/� +�
*�
*�s �-�6c �� � t � 5 d|v rF|d }d| j v r"t |t � r|j dd � | j |� d d d � y # 1 sw Y y xY w)N�userr+ )r r/ r? rG �poprA )r9 rS rY s r; �
scrub_userzEventScrubber.scrub_user� sS � �
(�
*���� �V�}�� �4�=�=�0�Z��d�5K��H�H�\�4�0�����%� +�
*�
*�s �A A � A(c �� � t � 5 d|v r@t |d t � s-d|d v r&|d d D ] }d|v s�| j |d � � d d d � y # 1 sw Y y xY w)N� breadcrumbs�valuesrP )r r? r rA )r9 rS �values r; �scrub_breadcrumbsz EventScrubber.scrub_breadcrumbs� sd � �
(�
*� ��%�"�5� �#7� �H� �E�-�$8�8�!&�}�!5�h�!?��!�U�?� �O�O�E�&�M� :� "@�
+�
*�
*�s �.A�A�A"c � � t � 5 t |� D ] }d|v s�| j |d � � d d d � y # 1 sw Y y xY w)N�vars)r r rA )r9 rS �frames r; � scrub_frameszEventScrubber.scrub_frames� s: � �
(�
*�*�5�1���U�?��O�O�E�&�M�2� 2� +�
*�
*�s
�?�?�Ac �� � t � 5 d|v rEt t t t t
f |d � D ] }d|v s�| j
|d � � d d d � y # 1 sw Y y xY w)N�spansrP )r r r r rI �objectrA )r9 rS �spans r; � scrub_spanszEventScrubber.scrub_spans� sW � �
(�
*��%� � ��d�3��;�&7�!8�%��.� I�D� ��~� ����V� �5� J� +�
*�
*�s �3A �A � A'c �� � | j |� | j |� | j |� | j |� | j |� | j |� y )N)rT rW r[ r` rd ri rR s r; � scrub_eventzEventScrubber.scrub_event� sT � � ���5�!� ���� � ���� � � � �u�%� ���%� � ���� rD )NFFN)rS r r3 N)�__name__�
__module__� __qualname__�boolr< rg rB rA rT rW r[ r` rd ri rk � rD r; r. r. ? s� � � +/� �!&�.2� #�'�#� �#� � #�
,� #�
�
#�4 �f� �� � #�F� #�t� #�&>�0�
&� ;�3� 6� rD r. N)�typingr r r r �sentry_sdk.utilsr r r r
�sentry_sdk._typesr r5 r7 r. rp rD r; �<module>rt s= �� 2� 2�� � � �'�&� �P� �q � q rD