Add extra checks on hash lookups

app/local_settings.example.py

@@ -36,6 +36,8 @@ OBFUSCATE_DASH_NUM = 2
 # DON'T obfuscate the last X fields of values separates by colons
 OBFUSCATE_COLON_NUM = 1
 
+SEARCH_FIELDS_DENY = ["ts", "date", "time"]
+
 # Common to encryption and hashing
 WHITELIST_FIELDS = [
     "ts",
@@ -47,15 +49,32 @@ WHITELIST_FIELDS = [
     "num_chans",
     "num_users",
     "online",
-    "tokens",
     "src",
     "exemption",
     "hidden",
+    "type",
 ]
 
 # Don't obfuscate these parameters, or lookup hashes in them
 NO_OBFUSCATE_PARAMS = [
     "query",
+#    "query_full",
+    "size",
+    "source",
+    "sorting",
+    "tags",
+    "index",
+    "dedup",
+    "check_sentiment",
+    "sentiment_method",
+    "dates",
+    "sort",
+    "page",
+]
+
+# Don't allow tag search for these parameters
+TAG_SEARCH_DENY = [
+    "query",
     "query_full",
     "size",
     "source",
@@ -66,8 +85,11 @@ NO_OBFUSCATE_PARAMS = [
     "check_sentiment",
     "sentiment_method",
     "dates",
+    "sort",
+    "page",
 ]
 
+
 OPENSEARCH_BLACKLISTED = {}
 
 # URLs