Remove GDPR data from error messages.
Here is an example error message I received, containing GDPR data. This makes it so we can't just log the data.
{
"Message": "Assigned space is not available for check-in. Please assign an inspected space and try again. (XXXX, YYYYYY; BBBBBBBB (1111111111111, John Doe, 6/12/2023 - 6/19/2023, 417))",
"Details": null
}
I suggest moving the GDPR data to the (apparently) unused "Details" field, or create a new field to store that data. Or maybe make a "GdprSafeMessage" field.
1
vote
![](http://www.gravatar.com/avatar/2b9421a7d1e02c240187a902d07bc443?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)