remove sensitive info from logs

HabitRPG · Jul 8, 2018 · 8a4c4e1 · 8a4c4e1
1 parent 18ed0fe
commit 8a4c4e1
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/website/server/middlewares/errorHandler.js b/website/server/middlewares/errorHandler.js
@@ -69,8 +69,11 @@ module.exports = function errorHandler (err, req, res, next) { // eslint-disable
   logger.error(err, {
     method: req.method,
     originalUrl: req.originalUrl,
-    headers: omit(req.headers, ['x-api-key', 'cookie', 'password', 'confirmPassword']), // don't send sensitive information that only adds noise
-    body: req.body,
+
+    // don't send sensitive information that only adds noise
+    headers: omit(req.headers, ['x-api-key', 'cookie', 'password', 'confirmPassword']),
+    body: omit(req.body, ['password', 'confirmPassword']),
+
     httpCode: responseErr.httpCode,
     isHandledError: responseErr.httpCode < 500,
   });