fix regexp for log redaction to actually redact AS access_tokens etc github/matthew/fix-log-redaction matthew/fix-log-redaction

1 files changed, 1 insertions, 1 deletions

diff --git a/synapse/http/site.py b/synapse/http/site.py

index 4b09d7ee66..a3a2c41217 100644
--- a/synapse/http/site.py
+++ b/synapse/http/site.py
@@ -20,7 +20,7 @@ import logging
 import re
 import time
 
-ACCESS_TOKEN_RE = re.compile(r'(\?.*access(_|%5[Ff])token=)[^&]*(.*)$')
+ACCESS_TOKEN_RE = re.compile(r'(\?\S*?access(_|%5[Ff])token=).*?(&|\s|$)')
 
 
 class SynapseRequest(Request):