ECOM-1947: updated the middleware to exclude the password strings from event logging

2015-07-29 18:49:33 +05:00
parent 2e53b9e82c
commit f286152f5a
1 changed files with 1 additions and 1 deletions
--- a/common/djangoapps/track/middleware.py
+++ b/common/djangoapps/track/middleware.py
@@ -63,7 +63,7 @@ class TrackMiddleware(object):
            # files when we change this.

            censored_strings = ['password', 'newpassword', 'new_password',
-                                'oldpassword', 'old_password']
+                                'oldpassword', 'old_password', 'new_password1', 'new_password2']
            post_dict = dict(request.POST)
            get_dict = dict(request.GET)
            for string in censored_strings: