Skip to content

Redact sensitive headers in HTTP request/response logs #469

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dogancanbakir merged 6 commits into from
Jun 25, 2026
Merged

Redact sensitive headers in HTTP request/response logs #469

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
64b4fb0
Redact sensitive headers in HTTP request/response logs
mirackayikci Jun 17, 2026
9f7609f
Redact X-PDCP-Key in service-layer debug request dump
mirackayikci Jun 17, 2026
e418e67
Change log level from Print to Debug for request dump
mirackayikci Jun 17, 2026
c50872c
Update regex to use xPDCPHeaderKey constant
mirackayikci Jun 18, 2026
f6ddc28
Merge remote-tracking branch 'upstream/main' into patch-1
mirackayikci Jun 24, 2026
5a4ed0f
Refactor redactSensitiveHeaders to use a single regex
mirackayikci Jun 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions cmd/vulnx/clis/common.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -274,7 +274,7 @@ func ensureVulnxClientInitialized(_ *cobra.Command) error {
if err == nil {
var sb strings.Builder
sb.WriteString("--- HTTP REQUEST ---\n")
sb.Write(dump)
sb.WriteString(redactSensitiveHeaders(dump))
sb.WriteString("--------------------\n")
gologger.Debug().MsgFunc(sb.String)
}
Expand All @@ -286,7 +286,7 @@ func ensureVulnxClientInitialized(_ *cobra.Command) error {
if err == nil {
var sb strings.Builder
sb.WriteString("--- HTTP RESPONSE ---\n")
sb.Write(dump)
sb.WriteString(redactSensitiveHeaders(dump))
sb.WriteString("---------------------\n")
gologger.Debug().MsgFunc(sb.String)
}
Expand Down Expand Up @@ -1043,3 +1043,9 @@ func GetUpdateCallback() func() {
updateutils.GetUpdateToolCallback("vulnx", Version)()
}
}

var sensitiveHeaderRe = regexp.MustCompile(`(?i)(X-Api-Key:\s*).*`)

func redactSensitiveHeaders(dump []byte) string {
return sensitiveHeaderRe.ReplaceAllString(string(dump), "${1}[REDACTED]")
Comment thread
dogancanbakir marked this conversation as resolved.
}
Loading