Remove session key from datadog logs

Otherwise, anyone accessing datadog can impersonate any user.
gip-inclusion · Apr 29, 2024 · b5c0795 · b5c0795
1 parent ec770fa
commit b5c0795
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/itou/utils/logging.py b/itou/utils/logging.py
@@ -3,7 +3,7 @@
 
 class ItouDataDogJSONFormatter(datadog.DataDogJSONFormatter):
     # We don't want those information in our logs
-    LOG_KEYS_TO_REMOVE = ["usr.name", "usr.email"]
+    LOG_KEYS_TO_REMOVE = ["usr.name", "usr.email", "usr.session_key"]
 
     def json_record(self, message, extra, record):
         log_entry_dict = super().json_record(message, extra, record)