Web Security · Senior · Question 62 of 75
What should never appear in application logs?
- ✓Correct answer: Passwords, full tokens, session IDs and unmasked payment data
- 2Request IDs and timestamps
- 3HTTP status codes
Explanation
Logs are copied to many systems and kept for a long time. Mask secrets at the logger, and log security events like failed logins.