fix: redact req.body.body

opengovsg · Sep 25, 2024 · 83af458 · 83af458
1 parent 6e942c2
commit 83af458
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/backend/src/core/loaders/express.loader.ts b/backend/src/core/loaders/express.loader.ts
@@ -218,6 +218,11 @@ const expressApp = ({ app }: { app: express.Application }): void => {
             })
           )
         }
+        if (propName === 'body' && req.body.body) {
+          // An example of req.body.body is the email body of an email that a user wishes to send
+          // We should redact such content as it may contain sensitive information
+          req.body.body = '[REDACTED]'
+        }
         return (req as any)[propName]
       },
       metaField: null, // flatten this log to root instead of nesting under `meta`