http (feature): Exclude X-XSRF-Token, X-Auth-Token from http logs by …

…default (#3858)
wvlet · Mar 5, 2025 · dc9821f · dc9821f
1 parent 90474ae
commit dc9821f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/airframe-http/src/main/scala/wvlet/airframe/http/HttpLogger.scala b/airframe-http/src/main/scala/wvlet/airframe/http/HttpLogger.scala
@@ -103,7 +103,11 @@ object HttpLogger extends LogSupport {
   def defaultExcludeHeaders: Set[String] = Set(
     HttpHeader.Authorization,
     HttpHeader.ProxyAuthorization,
-    HttpHeader.Cookie
+    HttpHeader.Cookie,
+    HttpHeader.SetCookie,
+    HttpHeader.SetCookie2,
+    "X-XSRF-Token",
+    "X-Auth-Token"
   )
 
   def emptyLogger(inputConfig: HttpLoggerConfig): HttpLogger = new HttpLogger {