Django error report emails - customize settings parameters

Question

I noticed that the Django error report mails includes the settings parameters of my project, including some sensitive keys and secret numbers.

What is the best way of dropping/customizing some of the Django SETTINGS parameters out of the error report emails?

Answer 1

Any setting with a name that contains API, TOKEN, KEY, SECRET, PASS or SIGNATURE will automatically be 'cleansed' (replaced with stars) in error mails. The easiest way to hide your own sensitive keys would probably be just renaming them.

The Django documentation has some additional things you could do to obfuscate other sensitive data that can appear in error mails, like POST variables or traceback information.