Merge pull request #69 from Clever/flare-1008-update-req-parsing

Sanitize query params before logging
Clever · Oct 6, 2020 · 76c074f · 76c074f
2 parents 0416eb0 + bc92252
commit 76c074f
Show file tree

Hide file tree

Showing 4 changed files with 2,515 additions and 3 deletions.
diff --git a/lib/middleware.ts b/lib/middleware.ts
@@ -59,7 +59,8 @@ function getBaseUrl(req) {
 function getQueryParams(req) {
   var url = req.originalUrl || req.url;
   var parsed = require("url").parse(url, true);
-  return parsed.search;
+  var parsedQueryString = require("qs").parse(parsed.search, {allowPrototypes: false, ignoreQueryPrefix: true});
+  return `?${require("qs").stringify(parsedQueryString)}`;
 }
 
 /**