Ticket #11578: filter_parameter_logging__by_default.diff

railties/helpers/application.rb

@@ -7 +7 @@
-  # See ActionController::RequestForgeryProtection for details
-  # Uncomment the :secret if you're not using the cookie session store
-  protect_from_forgery # :secret => '<%= app_secret %>'
+  
+  # Filter parameter logging for all fields with names like "password". This prevents the logging of your users' passwords.
+  filter_parameter_logging :password
-end