diff --git a/lib/logger.js b/lib/logger.js index b8583bb..0da25db 100644 --- a/lib/logger.js +++ b/lib/logger.js @@ -4,7 +4,20 @@ const { combine, timestamp, label, printf } = format; require('winston-daily-rotate-file'); var config = require('./config').config; -var sensitiveFields = ['cardCode', 'cardNumber', 'expirationDate', 'accountNumber', 'nameOnAccount', 'transactionKey', 'email', 'phoneNumber', 'faxNumber', 'dateOfBirth']; +var sensitiveFields = [ + // Payment card fields + 'cardCode', 'cardNumber', 'expirationDate', 'accountNumber', 'nameOnAccount', + // Authentication credentials + 'transactionKey', 'name', 'sessionToken', 'password', 'clientKey', 'accessToken', + // Personal information + 'email', 'phoneNumber', 'faxNumber', 'dateOfBirth', + // Banking fields (eCheck) + 'routingNumber', + // Magnetic stripe data (PCI-DSS SAD) + 'track1', 'track2', + // Tokenization and 3D-Secure authentication + 'cardholderAuthenticationValue', 'authenticationIndicator', 'dataValue', 'cryptogram' +]; const maskedLoggingFormat = printf(({ level, message, label, timestamp }) => { if (isJson(message)) {