从Nginx日志中剥离$request_body POST数据中的密码

我试图从我的Nginx / OpenResty POST数据日志中剥离密码。

Post数据日志如下所示:

 "POST /myapi/login/ HTTP/1.1" 200 37 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)

Chrome/75.0.3770.100 Safari/537.36" 0.000 req_body:"----password\x22\x0D\x0A\x0D\x0AXXXXX\x0D\x0A------9\x0D\x0AContent-Disposition: form-data; resp_body:"{success: \x22login succesful\x22}\x0A" upstream_response_time=- msec=1562036599.391 upstream_connect_time=- request_time=0.000 status=200

这里我想用"XXXXX"替换"testuser",这样用户密码就不会被任何人看到。

点赞