SensitiveFormatter

conreq/settings.py

@@ -134,9 +134,11 @@
     "disable_existing_loggers": False,
     "formatters": {
         "default": {
+            "class": "conreq.utils.logging.SensitiveFormatter",
             "format": "%(asctime)s %(levelname)s %(name)s: %(message)s",
         },
         "minimal": {
+            "class": "conreq.utils.logging.SensitiveFormatter",
             "format": "%(levelname)s %(name)s: %(message)s",
         },
     },
@@ -440,9 +442,7 @@
 if not get_safe_mode():
     user_apps = find_apps()
     INSTALLED_APPS += user_apps
-    _logger.info(
-        "Starting Conreq with the following apps:\n+ " + "\n+ ".join(user_apps)
-    )
+    _logger.info("Booting with the following apps:\n+ " + "\n+ ".join(user_apps))
 
 # Run startup.py
 packages = find_packages()

conreq/utils/logging.py

@@ -0,0 +1,15 @@
+import logging
+import re
+
+
+class SensitiveFormatter(logging.Formatter):
+    """Formatter that removes sensitive information in URLs."""
+
+    @staticmethod
+    def _filter(s):
+        # Removes query parameters from the URL
+        return re.sub(r"( /)(\S+)([?])(\S+?[=]\S+)", r"\1\2", s)
+
+    def format(self, record):
+        original = logging.Formatter.format(self, record)
+        return self._filter(original)