There should be a way to replace the values in the Form Elements about elmahcore HOT 4 OPEN

I've been looking into doing this with a custom filter but the documentation is fairly limited around this.

So far I have this:

public class SensitiveDataFilter : IErrorFilter
{
    public void OnErrorModuleFiltering(object sender, ExceptionFilterEventArgs args)
    {
        var httpContext = args.Context as HttpContext;
        var formkeys = httpContext.Request.Form.Keys;

        var sensitiveFormData = formkeys.Where(key => key.Contains("Password", StringComparison.OrdinalIgnoreCase)).ToList();
        if (sensitiveFormData.Count == 0)
            return;

        var error = new Error(args.Exception, httpContext);
        sensitiveFormData.ForEach(x => error.Form.Set(x, "*****"));
        
        args.Dismiss();
    }
}

Struggling to rethrow the newly created error so that the log still contains the entry without the sensitive data. If I remove the arg.Dismiss(); line the log entry is made but no changes to the form data obviously.

Any ideas how to throw a new error as part of this hook?

from elmahcore.

I ended up creating a fork off of this project and adding Func<HttpContext, Error, Task> onError as a parameter to the init. Then I could intercept the error and modify the values prior to them being logged to the db.

from elmahcore.

@danielDevelops Not quite sure I follow what you mean. Got an example of this at all? Thanks

from elmahcore.

Hey There,

I found a solution to remove values in the Request Form. In my case, our project is in dotnet core 6 and We saved the errors in a table in SQL Server, so I have created a custom SqlErrorLog to override the Log() method and remove the value in the form collection.

This is my Elmah settings:

.AddElmah<MySQLErr>(options => { options.Path = "myerrors"; options.ApplicationName = "WebAPI"; options.ConnectionString = "xxx"; });

This is my custom class:

`
public class MySQLErr : SqlErrorLog
{
public mySQLErr(IOptions option) : base(option)
{
}

public mySQLErr(string connectionString) : base(connectionString)
{
}

public mySQLErr(string connectionString, string schemaName, string tableName) : base(connectionString, schemaName, tableName)
{
}

public override string Log(Error error)
{
  var formKeys = error.Form.AllKeys;
  if (formKeys.HasValue())
  {
    
    int formKeysLength = formKeys.Length;

    for (int i = 0; i < formKeysLength; i++)
    {
      if (formKeys[i].Equals("password", StringComparison.InvariantCultureIgnoreCase))
      {
        // Remove password
        error.Form.Remove(formKeys[i]); 
      }
    }
  }

  return base.Log(error);
}

}
`

from elmahcore.