Sensitive Field Masking Not Applied to Password in XML Request Logs

[mohammaddarweesh]

When sending and receiving requests between the backend and a third-party API, the request and response payloads are being logged. However, the password field in the XML request is not masked or hidden.

Example:

<Authentication>
  <Username>string</Username>
  <Password>string</Password>
</Authentication>

The password value is currently displayed in plain text, even though the Password field has been configured as a Sensitive Field.

Could you please confirm whether masking sensitive fields in XML payloads is currently supported?

[thepirat000]

Do you mean the audits generated by Audit.HttpClient extension?