From 2573b7325a6add033cdc4e2469d19a3e14b67c32 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 4 Feb 2021 12:01:29 +0100
Subject: [PATCH] firmware: do not show subscription key on firmware status
 page #4500

---
 src/opnsense/scripts/firmware/product.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/opnsense/scripts/firmware/product.php b/src/opnsense/scripts/firmware/product.php
index 6a5373344..46e2ec8f6 100755
--- a/src/opnsense/scripts/firmware/product.php
+++ b/src/opnsense/scripts/firmware/product.php
@@ -32,7 +32,7 @@ $metafile = '/usr/local/opnsense/version/core';
 $ret = json_decode(@file_get_contents($metafile), true);
 if ($ret != null) {
     $ret['product_crypto'] = explode(' ', trim(shell_exec('/usr/local/bin/openssl version')))[0];
-    $ret['product_mirror'] = trim(shell_exec('opnsense-update -M'));
+    $ret['product_mirror'] = preg_replace('/\/[a-z0-9]{8}(-[a-z0-9]{4}){3}-[a-z0-9]{12}\//i', '/subscription-key/', trim(shell_exec('opnsense-update -M')));
     $ret['product_time'] = date(DATE_RFC2822, filemtime($metafile));
     ksort($ret);
 } else {