Merge pull request #2644 from cyberark/Filter-request-params

Remove code and state from the info logs of the url request
cyberark · Sep 7, 2022 · 4d5583b · 4d5583b
2 parents 6403ba6 + 1073506
commit 4d5583b
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [1.18.2] - 2022-09-01
 
+### Security
+- Remove code and state from the debug logs
+  [conjurinc/conjur-ui#2644](https://github.com/cyberark/conjur/pull/2644)
+
 ### Changed
 - Reduces debug log verbosity.
   [cyberark/conjur#2639](https://github.com/cyberark/conjur/pull/2639)

diff --git a/config/initializers/filter_parameter_logging.rb b/config/initializers/filter_parameter_logging.rb
@@ -3,4 +3,4 @@
 # Be sure to restart your server when you modify this file.
 
 # Configure sensitive parameters which will be filtered from the log file.
-Rails.application.config.filter_parameters += [:password, :value]
+Rails.application.config.filter_parameters += [:password, :value, :code, :state]