blob: 663549d130b445ba335ec94fbfc8622dc5861d6b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
== Parameter filtering ==
Rails keeps a log file for each environment (development, test and production) in the "log" folder. These are extremely useful when debugging what's actually going on in your application, but in a live application you may not want every bit of information to be stored in the log file. The "filter_parameter_logging":http://api.rubyonrails.org/classes/ActionController/Base.html#M000837 method can be used to filter out sensitive information from the log. It works by replacing certain keys in the `params` hash with "[FILTERED]" as they are written to the log. As an example, let's see how to filter all parameters with keys that include "password":
[source, ruby]
-------------------------
class ApplicationController < ActionController::Base
filter_parameter_logging :password
end
-------------------------
The method works recursively through all levels of the params hash and takes an optional second parameter which is used as the replacement string if present. It can also take a block which receives each key in return and replaces those for which the block returns true.
|