Sanitization

Sanitization protects sensitive data (passwords, secret keys, etc.) from leakage.

You should always sanitize the log so no personal tokens and/or keys are leaked.

If you don't use sanitization, the request and response logs will not be available in the console.

With correct sanitization

Example of a log from the console with a sanitized access token

...
"log": {
        "sanitize": ["request.headers.accesstoken"]
    }
...

Accesstoken is correctly mapped, so it's not exposed.

Without sanitization

With incorrect sanitization