Disable dumping of headers on trace

Some headers (e.g.: Authorization) contains sensitive information which should not be logged.
RedisLabs · Dec 22, 2024 · 05dc11e · 05dc11e
1 parent cbda1d1
commit 05dc11e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/source/common/http/filter_manager.h b/source/common/http/filter_manager.h
@@ -679,7 +679,8 @@ class FilterManager : public ScopeTrackedObject,
     const char* spaces = spacesForLevel(indent_level);
     os << spaces << "FilterManager " << this << DUMP_MEMBER(state_.has_1xx_headers_) << "\n";
 
-    DUMP_DETAILS(filter_manager_callbacks_.requestHeaders());
+    // Disabled to avoid dumping sensitive information (such as AUTHORIZATION header)
+    // DUMP_DETAILS(filter_manager_callbacks_.requestHeaders());
     DUMP_DETAILS(filter_manager_callbacks_.requestTrailers());
     DUMP_DETAILS(filter_manager_callbacks_.responseHeaders());
     DUMP_DETAILS(filter_manager_callbacks_.responseTrailers());