Re:Facebook Stored Hundreds of Millions of User Passwords in...
by pmontra on Thursday March 21, 2019 @12:27PM
(#19454190)
I'm working with Rails and Phoenix on two different projects right now and all of them filter out passwords in the log files [1] [2].
I'm also working on a Django project but we're not logging HTTP calls arguments there. I think we could use a filter like [3] but I'd rather have the framework to automatically take care of that.
And if I'd be writing a web app from scratch, no matter if I've been doing web for 25 years, I'm sure I'll do a lot of silly mistakes. That's why I prefer to build on top of frameworks.
I'm also working on a Django project but we're not logging HTTP calls arguments there. I think we could use a filter like [3] but I'd rather have the framework to automatically take care of that.
And if I'd be writing a web app from scratch, no matter if I've been doing web for 25 years, I'm sure I'll do a lot of silly mistakes. That's why I prefer to build on top of frameworks.
[1] https://guides.rubyonrails.org/configuring.html#rails-genera...
[2] https://hexdocs.pm/phoenix/Phoenix.Logger.html
[3] https://djangosnippets.org/snippets/2966/