📝 `@sensitive_variables` decorator is missing on auth views (#1323)
We already have
@endpoint_decorator(sensitive_post_parameters()) on all API views that work with auth, but I forgot about sensitive_variables: https://docs.djangoproject.com/en/6.1/howto/error-reporting/#django.views.decorators.debug.sensitive_variablesWe need to add vars that must not leak into the logs / error reporting middlewares / etc.
(please, do not take this issue before the 1st of September)
#bug #good_first_issue #help_wanted #security #opensource_september #django_modern_rest
sent via relator