Forum Discussion
Muhannad
Cirrus
CirrusMasking a URL in the ASM event logs
Dears, I have a question related to mask sensitive information in the logs for a Mobile APP (Rest API), these data are appearing in the URL and not parsed as parameters in the ASM policy so i am una...
afr_jn
Altocumulus
AltocumulusHi Muhannad,
In applications that use REST-style URLs, parts of the URL file path contain strings that in fact function as parameter values. So you must observe the parameter on the URL and create Parameter with masking value.
Example:
Standard
GET /login?username=xxxx&password=yyyy HTTP/1.1
REST URL
GET /login/username/xxxx/password/yyyy HTTP/1.1
