Marked where HDR_FTP_ARGUMENTS for FTP gw PASS may need to be hidden.

diff --git a/src/HttpHeader.cc b/src/HttpHeader.cc
index ee08bea38bd5dd8301e8469d3ec9899eb32ccaf7..f13f0811adfc7ad8a085f50416946deba61017c2 100644 (file)
--- a/src/HttpHeader.cc
+++ b/src/HttpHeader.cc
@@ -725,6 +725,8 @@ HttpHeader::packInto(Packer * p, bool mask_sensitive_info) const
             continue;
         }
         switch (e->id) {
+        // TODO: When FTP gw command wrappers may end up in error pages and
+        // other sensitive places, hide HDR_FTP_ARGUMENTS for FTP PASS command.
         case HDR_AUTHORIZATION:
         case HDR_PROXY_AUTHORIZATION:
             packerAppend(p, e->name.rawBuf(), e->name.size());