{"version":"2.1.275","anchor":"query-string-redaction-helper-for-logged-urls","canonical_anchor":"query-string-redaction-helper-for-logged-urls","heading":"Query-string redaction helper for logged URLs","tier":"internal","area":"Elsewhere","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.275\/e\/query-string-redaction-helper-for-logged-urls","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.275","markdown":"### Query-string redaction helper for logged URLs\n\nURLs shown in logs now have most query-string values redacted\n\n**What**\n\nA new helper redacts the query string of any URL before it's logged or displayed: it keeps the path, but replaces the value of each query parameter with `***`, unless the parameter's name is on an allowed list (`ref`, `branch`, `tag`, `path`, `file`, `file_path`, `version`, `format`) and its value looks like a safe, path-like string.\n\n**Why**\n\nThis reduces the chance that sensitive data passed in a URL's query string (like tokens or identifiers) ends up exposed in logs, while still keeping harmless, useful values like a git ref or file path visible for debugging.\n\n- Area: Elsewhere\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}