Skip to content

[MB-215] docs(security): add guide on sensitive data in logs - #116

Open
mb-juan-salvador wants to merge 1 commit into
mainfrom
MB-215
Open

[MB-215] docs(security): add guide on sensitive data in logs#116
mb-juan-salvador wants to merge 1 commit into
mainfrom
MB-215

Conversation

@mb-juan-salvador

@mb-juan-salvadormb-juan-salvador commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add a dedicated security guide that covers sensitive data in logs: why it matters (GDPR, PCI-DSS, OWASP A09:2021), what data to exclude, and mitigation techniques.
  • Include Rails-specific guidance (filter_parameters, ActiveSupport::ParameterFilter, redirect filters) with good and bad code examples.
  • Include Next.js-specific guidance (Pino redact option) with good and bad code examples.
  • Replace the brief section in web_application_security_features.md with a summary that links to the new dedicated guide.

MB-215: Add Guidance on Logging Sensitive Data in Security guides

Cover why sensitive data must not appear in logs (GDPR, PCI-DSS, OWASP
A09:2021), what data to exclude, and how to apply redaction in Rails
(filter_parameters, ParameterFilter) and Next.js (Pino redact). Include
good and bad code examples for both stacks.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@mb-juan-salvador