Never log password value #7366

Ecodev · Dec 9, 2020 · aa8d5b3 · aa8d5b3
1 parent 4084186
commit aa8d5b3
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/Log/EventCompleter.php b/src/Log/EventCompleter.php
@@ -72,8 +72,17 @@ private function getEnvData(): array
         return $envData;
     }
 
+    /**
+     * Remove password value from GraphQL variables well-known structure
+     */
     protected function removeSensitiveData(array $request): array
     {
+        foreach ($request as &$r) {
+            if (is_array($r)) {
+                unset($r['variables']['password']);
+            }
+        }
+
         return $request;
     }