Skip to content

DAST/Browserker: Logging redaction and log formatting review

Integrate the centralized redaction service with Browserker logging. The goal is to redact variables passed to the Msgf() logging method, but not the format strings.

Some existing logging calls are made with "pre-formatted strings" that are created with fmt.Sprintf() and then passed to the Msg() logging method. These should be updated, if possible, to pass a format string and variables, so that the variables can be redacted.

See parent epic for details.

Implementation Plan

  • Add or update end-to-end tests for unredacted values in logging
  • Integrate redaction service with logging
  • Improve "pre-formatted string" logging, where possible
    • A new review of Msg calls did not find any concerning uses of fmt.Sprintf.
Edited by David Nelson