diff --git a/jans-config-api/server/src/main/java/io/jans/configapi/rest/resource/auth/CustomScriptResource.java b/jans-config-api/server/src/main/java/io/jans/configapi/rest/resource/auth/CustomScriptResource.java
index 88f8437d156..a139940d050 100644
--- a/jans-config-api/server/src/main/java/io/jans/configapi/rest/resource/auth/CustomScriptResource.java
+++ b/jans-config-api/server/src/main/java/io/jans/configapi/rest/resource/auth/CustomScriptResource.java
@@ -6,6 +6,7 @@
 
 package io.jans.configapi.rest.resource.auth;
 
+import static io.jans.as.model.util.Util.escapeLog;
 import io.jans.configapi.core.rest.ProtectedApi;
 import io.jans.configapi.util.ApiAccessConstants;
 import io.jans.configapi.util.ApiConstants;
@@ -66,7 +67,9 @@ public Response getCustomScriptsByTypePattern(@PathParam(ApiConstants.TYPE) @Not
     @Path(PATH_SEPARATOR + ApiConstants.INUM + PATH_SEPARATOR + ApiConstants.INUM_PATH)
     @ProtectedApi(scopes = { ApiAccessConstants.SCRIPTS_READ_ACCESS })
     public Response getCustomScriptByInum(@PathParam(ApiConstants.INUM) @NotNull String inum) {
-        log.debug("Custom Script to be fetched - inum:{} ",inum);
+        if (log.isDebugEnabled()) {
+            log.debug("Custom Script to be fetched - inum:{} ", escapeLog(inum));
+        }
         CustomScript script = null;
         try {
             script = this.customScriptService.getScriptByInum(inum);
@@ -113,7 +116,9 @@ public Response updateScript(@Valid @NotNull CustomScript customScript) {
     @ProtectedApi(scopes = { ApiAccessConstants.SCRIPTS_DELETE_ACCESS })
     public Response deleteScript(@PathParam(ApiConstants.INUM) @NotNull String inum) {
         try {
-            log.debug("Custom Script Resource to delete - inum:{}",inum);
+            if (log.isDebugEnabled()) {
+                log.debug("Custom Script Resource to delete - inum:{}",escapeLog(inum));
+            }
             CustomScript existingScript = customScriptService.getScriptByInum(inum);
             customScriptService.remove(existingScript);
             return Response.noContent().build();