Sensitive data in logs (ARCH1001)
Ce contenu n’est pas encore disponible dans votre langue.
Key dotnet.logging.sensitive-data-in-logs · Severity error · Category logging
Sensitive data such as passwords, tokens, or card details can leak permanently once written to logs. Never write these fields to the log.
Incorrect
Section titled “Incorrect”_logger.LogInformation("User login: {Email} password {Password}", email, password);Correct
Section titled “Correct”_logger.LogInformation("User login: {Email}", email);Remove sensitive fields from log calls; mask them if needed, or pass only non-sensitive identifiers such as an id.