• Resolved andrekelling

    (@andrekelling)


    Hi,

    thats such a nice plugin!
    also UI is working very well!
    a lot nicer then https://ww.wp.xz.cn/plugins/log-http-requests/

    I am on testing it out right now and spotted an issue or more a feature request:

    it logs request fine also with headers and everything.

    but I would like to skip certain headers to get written to DB http-request logs.
    especially headers which contain secrets like api keys.

    e.g. i would like to skip a headers prop called “x-api-key” from getting logged.
    or getting logged like “x-api-key”:”xxxxx”

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Prakhar Bhatia

    (@prakharb88)

    Thank you ! I have noted that and will add a feature to skip required headers in next version.

    I will try to update it by tonight or tomorrow.

    Cheers,
    Prakhar

    Plugin Author Prakhar Bhatia

    (@prakharb88)

    Added an option for that:

    How it works: Any header name listed in the “Sensitive Headers” textarea (one per line, case-insensitive) will be stored as xxxxx in the DB instead of its real value. So x-api-key: sk-abc123 becomes x-api-key: xxxxx.
    Go to Settings → Sensitive Headers in the plugin admin to customize the list.

    Thank you for using the plugin!

    Thread Starter andrekelling

    (@andrekelling)

    thx,
    works fine!

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.