Sensitive Data In Logs (ARCH6160)
Ce contenu n’est pas encore disponible dans votre langue.
Key ruby.logging.sensitive-data-in-logs · Severity error · Category logging
Logging sensitive values such as passwords, tokens, API keys, or card numbers leaks those secrets into log stores, exposing them permanently.
Incorrect
Section titled “Incorrect”Rails.logger.info("Login", email: params[:email], password: params[:password])Correct
Section titled “Correct”Rails.logger.info("Login", email: params[:email])Never log sensitive fields; mask or filter them (filter_parameters) when needed.