safe-global / safe-client-gateway / 35581331400

89%

push

github

fix(messages): stop logging signed message content (#3456)

Proposal logs carried the full off-chain message body and the signature over
it. When a Safe signs a SiWe message through WalletConnect, that body holds the
requesting dapp's nonce, so the pair sat in Datadog side by side.

Log an explicit whitelist of fields instead, per the structured-logging rule in
docs/agents/security.md. The Safe address stays: it is the public key of the
queue-service messages API.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

4329 of 5109 branches covered (84.73%)

Branch coverage included in aggregate %.

10999 of 12115 relevant lines covered (90.79%)

513.35 hits per line