expand header matches

elastic · Dec 5, 2024 · bdfc5b3 · bdfc5b3
1 parent 1f86340
commit bdfc5b3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/pkg/config/config.go b/internal/pkg/config/config.go
@@ -170,7 +170,7 @@ func redactOutput(cfg *Config) Output {
 	}
 
 	for k := range redacted.Elasticsearch.Headers {
-		if strings.Contains(strings.ToLower(k), "auth") {
+		if strings.Contains(strings.ToLower(k), "auth") || strings.Contains(strings.ToLower(k), "token") || strings.Contains(strings.ToLower(k), "key") { // best-effort scan to redact sensitive headers
 			redacted.Elasticsearch.Headers[k] = kRedacted
 		}
 	}