Remove Sensitive Information about elmahcore HOT 4 CLOSED

 public class MsSqlErrorLogWithoutSensitiveInformation : SqlErrorLog
    {

        private List<String> sensitiveKeys = new List<string>() { "password", "pwd" };

        public MsSqlErrorLogWithoutSensitiveInformation(IOptions<ElmahOptions> option) : base(option)
        {
        }

        public MsSqlErrorLogWithoutSensitiveInformation(string connectionString, string schemaName, string tableName) : base(connectionString, schemaName, tableName)
        {
        }

        public override string Log(Error error)
        {
            var formKeys = error.Form.AllKeys;
            if (formKeys != null)
            {
                foreach (var key in formKeys)
                {

                    if (sensitiveKeys.Any(sk => key?.IndexOf(sk, StringComparison.OrdinalIgnoreCase) >= 0))
                    {
                        error.Form.Set(key, "******************");
                        if (error.Form.AllKeys.Contains("$request-body"))
                        {
                            error.Form.Remove("$request-body");
                        }
                    }
                }
            }

            return base.Log(error);

        }
    }

builder.Services.AddElmah<MsSqlErrorLogWithoutSensitiveInformation>(options =>
{
    options.ConnectionString = builder.Configuration.GetConnectionString("ConnectionName");
    options.SqlServerDatabaseTableName = "ErrorLogs"; //Defaults to ELMAH_Error if not set
    options.Path = "errorlogs";
    options.OnPermissionCheck = context => context.User.Identity.IsAuthenticated;
  

});