Description

We support 3 log patterns/formats for printing out HTTP access logs - common(default), combined, or long.

The long pattern prints out even all headers with sensitive information like Authorization, Cookie,...

It'd be good to mention it in the docs that administrators should be careful with handling the information, as it can be used for some malicious activity when obtained by an attacker.

Discussion

No response

Motivation

Improve security

Details

No response