Remove GDPR data from error messages.
Here is an example error message I received, containing GDPR data. This makes it so we can't just log the data.
{
"Message": "Assigned space is not available for check-in. Please assign an inspected space and try again. (XXXX, YYYYYY; BBBBBBBB (1111111111111, John Doe, 6/12/2023 - 6/19/2023, 417))",
"Details": null
}
I suggest moving the GDPR data to the (apparently) unused "Details" field, or create a new field to store that data. Or maybe make a "GdprSafeMessage" field.
1
vote
Ryan
shared this idea
