From 0b2f2d4122afdf1afb20db0738e30737170ff9e9 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Tue, 13 Jun 2017 13:11:23 -0400
Subject: [PATCH] Redact BGP MD5 password/key in status output. Fixes #7642

(cherry picked from commit aa18c5b9b62e110ebf88fbb24c39c2a13813bd89)
(cherry picked from commit 4122033534b5dd927cd5678cbe8b00267438dd44)
---
 src/usr/local/www/status.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php
index baa596d659..4a7529836b 100644
--- a/src/usr/local/www/status.php
+++ b/src/usr/local/www/status.php
@@ -143,6 +143,8 @@ function doCmdT($title, $command, $method) {
 				$line = preg_replace("/<passwordagain>.*?<\\/passwordagain>/", "<passwordagain>xxxxx</passwordagain>", $line);
 				$line = preg_replace("/<crypto_password>.*?<\\/crypto_password>/", "<crypto_password>xxxxx</crypto_password>", $line);
 				$line = preg_replace("/<crypto_password2>.*?<\\/crypto_password2>/", "<crypto_password2>xxxxx</crypto_password2>", $line);
+				$line = preg_replace("/<md5sigpass>.*?<\\/md5sigpass>/", "<md5sigpass>xxxxx</md5sigpass>", $line);
+				$line = preg_replace("/<md5sigkey>.*?<\\/md5sigkey>/", "<md5sigkey>xxxxx</md5sigkey>", $line);
 				$line = str_replace("\t", "    ", $line);
 				echo htmlspecialchars($line, ENT_NOQUOTES);
 				fwrite($ofd, $line);