From 479518c3e4e3e85304c8590e11c77b286431d214 Mon Sep 17 00:00:00 2001 From: Weston Schmidt Date: Tue, 8 Aug 2017 01:12:34 -0700 Subject: [PATCH] Don't share the secret with the failure URL. They should know this. --- src/caduceus/outboundSender.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/caduceus/outboundSender.go b/src/caduceus/outboundSender.go index af58d6dd..fe2e308e 100644 --- a/src/caduceus/outboundSender.go +++ b/src/caduceus/outboundSender.go @@ -136,6 +136,9 @@ func (osf OutboundSenderFactory) New() (obs OutboundSender, err error) { }, } + // Don't share the secret with others when there is an error. + caduceusOutboundSender.failureMsg.Original.Config.Secret = "XxxxxX" + if "" != osf.Listener.Config.Secret { caduceusOutboundSender.secret = []byte(osf.Listener.Config.Secret) }