Skip to content

Allow fields that I think are non-PII #6913

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jskinne3 merged 4 commits into from
Sep 6, 2022
Merged

Allow fields that I think are non-PII #6913

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d438b8e
Allow fields that I think are non-PII
jskinne3 Sep 2, 2022
af0e2b7
Remove profiled_domain
jskinne3 Sep 2, 2022
7ed023f
changelog: Internal, ThreatMetrix API, allow non-PII fields
jskinne3 Sep 2, 2022
4da8074
Redact http_referer and http_referer_url to be safe
jskinne3 Sep 6, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
58 changes: 58 additions & 0 deletions app/services/proofing/lexis_nexis/ddp/response_redacter.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,12 @@ class ResponseRedacter
account_email_result
account_email_score
account_email_worst_score
account_address_assert_history
account_address_country
account_address_first_seen
account_address_last_event
account_address_last_update
account_address_score
account_address_state
account_lex_id
account_lex_id_first_seen
Expand Down Expand Up @@ -37,6 +43,13 @@ class ResponseRedacter
bb_fraud_rating
bb_fraud_score
champion_request_duration
device_first_seen
device_id_confidence
device_last_event
device_last_update
device_match_result
device_score
device_worst_score
digital_id
digital_id_confidence
digital_id_confidence_rating
Expand All @@ -50,6 +63,10 @@ class ResponseRedacter
digital_id_trust_score_summary_reason_code
emailage.emailriskscore.billriskcountry
emailage.emailriskscore.correlationid
emailage.emailriskscore.domain_creation_days
emailage.emailriskscore.domainage
emailage.emailriskscore.domaincategory
emailage.emailriskscore.domaincountrymatch
emailage.emailriskscore.domainexists
emailage.emailriskscore.domainrelevantinfo
emailage.emailriskscore.domainrelevantinfoid
Expand All @@ -65,10 +82,16 @@ class ResponseRedacter
emailage.emailriskscore.eascore
emailage.emailriskscore.eastatusid
emailage.emailriskscore.emailexists
emailage.emailriskscore.emailtobilladdressconfidence
emailage.emailriskscore.emailtoipconfidence
emailage.emailriskscore.first_seen_days
emailage.emailriskscore.firstverificationdate
emailage.emailriskscore.fraudrisk
emailage.emailriskscore.ip_risklevel
emailage.emailriskscore.ip_riskreason
emailage.emailriskscore.iptobilladdressconfidence
emailage.emailriskscore.namematch
emailage.emailriskscore.overalldigitalidentityscore
emailage.emailriskscore.phone_status
emailage.emailriskscore.responsestatus.errorcode
emailage.emailriskscore.responsestatus.status
Expand All @@ -92,12 +115,42 @@ class ResponseRedacter
fraudpoint.synthetic_identity_index
fraudpoint.transaction_status
fraudpoint.vulnerable_victim_index
fuzzy_device_first_seen
fuzzy_device_id_confidence
fuzzy_device_last_event
fuzzy_device_last_update
fuzzy_device_match_result
fuzzy_device_result
fuzzy_device_score
fuzzy_device_worst_score
http_connection_type
http_referer_domain
input_ip_assert_history
input_ip_connection_type
input_ip_first_seen
input_ip_last_event
input_ip_last_update
input_ip_score
input_ip_worst_score
national_id_first_seen
national_id_last_event
national_id_last_update
national_id_score
national_id_type
national_id_worst_score
org_id
policy
policy_details_api
policy_engine_version
policy_score
page_time_on
primary_industry
private_browsing
profile_api_timedelta
profile_connection_type
profiling_datetime
profiling_delta
proxy_score
reason_code
request_duration
request_id
Expand All @@ -109,6 +162,9 @@ class ResponseRedacter
session_id
session_id_query_count
summary_risk_score
time_zone
Copy link
Contributor

@matthinz matthinz Sep 2, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This just made me Google "least populated time zones" to see if there would be a way to identify an individual by their time zone. (Answer: no)

time_zone_dst_offset
timezone_name
tmx_reason_code
tmx_risk_rating
tmx_summary_reason_code
Expand All @@ -120,6 +176,8 @@ class ResponseRedacter
tps_type
tps_vendor
tps_was_timeout
true_ip_score
true_ip_worst_score
unknown_session
]

Expand Down