Masking sensitive data in URL for logging

[joacar]

Hi,

Great work on this!

I wonder if there is any plan implementing an extensibility point to mask/remove sensitive data from HttpRequestMessage logging, for example in url?

[rynowak]

You can remove the built in logging by either filtering out of all of the relevant categories or removing all services of type IHttpMessageHandlerBuilderFilter from the service collection in ConfigureServices.

Be aware though the in ASP.NET Core broadly we don't consider URLs to be sensitive data, we log them all over the place.

[rynowak]

Closing this as its been answered. Let us know if we can do anything else to help.