sanitize_hash in KeysFilter may leak sensitive blocklisted params about airbrake-ruby HOT 3 CLOSED

Airbrake.add_filter do |notice|
  unless notice.ignored
    # Sanitize and explicitly cast any notification parameter to a hash.
    # Airbrake otherwise doesn't blocklist parameters in a non-hash (i.e. ApplicationRecord, ActiveRecord::Relation,
    # ActionController::Parameters, OpenStruct...).
    notice[:params].deep_transform_values! do |object|
      # Convert an ApplicationRecord object into its hash.
      object = object.attributes if object.is_a? ApplicationRecord
      # Convert an ApplicationRecord object into an array of hashes.
      object = object.to_a.map(&:attributes) if object.is_a? ActiveRecord::Relation
      # Sets the ActionController::Parameters to true and avoids ActionController::UnfilteredParameters when
      # converted to hash.
      object = object.permit! if object.is_a? ActionController::Parameters

      # rubocop:disable Lint/RescueException
      # Either way, try to cast it to a hash when the object is not a Hash but responds to a casting method.
      object = begin
                 if !object.is_a?(Array) && object.respond_to?(:to_h)
                   object.to_h
                 elsif object.respond_to? :to_hash
                   object.to_hash
                 else
                   object
                 end
               rescue Exception => e
                 # If the cast fails for any reason, be conservative and hide everything, but say it
                 "[The cast to hash of an object of type #{object.class} failed"\
                 "with an exception of type #{e.class}: #{e.message}]"
               end
      # rubocop:enable Lint/RescueException

      object
    end
  end
end