audunru / reporting-api / 40096738694

96%

push

github

fix: remove query strings and fragments from report URLs in log messages (#55)

* fix: remove query strings and fragments from report URLs in logs

A report URL is the full address of the page. Its query string and fragment
can hold tokens or personal data. LogReport and LogCspViolation now remove
them from the URLs in the message and from the absolute URLs in the raw
report. Override redactUrl() to also redact parts of the path.

* refactor: sanitize report URLs in the log message only

4 of 4 new or added lines in 3 files covered. (100.0%)

313 of 325 relevant lines covered (96.31%)

9.56 hits per line