From 1a14a6f4b7f7ef68de0fe9b923a76e9051bb9faf Mon Sep 17 00:00:00 2001 From: Matteo Pagliazzi Date: Sun, 15 May 2016 22:20:10 +0200 Subject: [PATCH] v3: do not log sensitive data --- website/server/middlewares/api-v3/errorHandler.js | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/website/server/middlewares/api-v3/errorHandler.js b/website/server/middlewares/api-v3/errorHandler.js index 027e25301b..11d75042e3 100644 --- a/website/server/middlewares/api-v3/errorHandler.js +++ b/website/server/middlewares/api-v3/errorHandler.js @@ -6,12 +6,15 @@ import { BadRequest, InternalServerError, } from '../../libs/api-v3/errors'; -import { map } from 'lodash'; +import { + map, + omit, +} from 'lodash'; module.exports = function errorHandler (err, req, res, next) { // eslint-disable-line no-unused-vars logger.error(err, { originalUrl: req.originalUrl, - headers: req.headers, + headers: omit(req.headers, ['x-api-key']), body: req.body, });