DAST/Browserker: Logging redaction and log formatting review
Integrate the centralized redaction service with Browserker logging. The goal is to redact variables passed to the Msgf() logging method, but not the format strings.
Some existing logging calls are made with "pre-formatted strings" that are created with fmt.Sprintf() and then passed to the Msg() logging method. These should be updated, if possible, to pass a format string and variables, so that the variables can be redacted.
See parent epic for details.
Implementation Plan
-
Add or update end-to-end tests for unredacted values in logging -
Integrate redaction service with logging -
Improve "pre-formatted string" logging, where possible- A new review of
Msgcalls did not find any concerning uses offmt.Sprintf.
- A new review of
Edited by David Nelson