Compare commits

...
Author SHA1 Message Date
Matej Bačo 57041feefd Allowlist support 2026-04-21 10:19:38 +02:00
2 changed files with 22 additions and 1 deletions
+15 -1
View File
@@ -944,7 +944,21 @@ Http::shutdown()
*/
$pattern = $route->getLabel('audits.payload', true);
if (! empty($pattern)) {
$auditContext->payload = $responsePayload;
$pattern = $route->getLabel('audits.payload.allowList', []);
if(empty($pattern)) {
$auditContext->payload = $responsePayload;
} else {
$auditContextPayload = [];
foreach ($pattern as $key) {
if (isset($responsePayload[$key])) {
$auditContextPayload[$key] = $responsePayload[$key];
}
}
$auditContext->payload = $auditContextPayload;
}
}
$publisherForAudits->enqueue(AuditMessage::fromContext($auditContext));
@@ -43,6 +43,13 @@ class Create extends Action
->label('event', 'rules.[ruleId].create')
->label('audits.event', 'rule.create')
->label('audits.resource', 'rule/{response.$id}')
->label('audits.payload', true)
->label('audits.payload.allowList', [
'domain', 'type', 'region', 'trigger', // Generic config
'deploymentId', 'deploymentInternalId', // Deployment congif
'deploymentResourceInternalId', 'deploymentResourceId', 'deploymentResourceType', // Site / Function config
'redirectUrl', 'redirectStatusCode', // Redirect config
])
->label('sdk', new Method(
namespace: 'proxy',
group: null,