socketutil: 'safe' functions for logging

frontend/socketutil.lua

@@ -136,4 +136,38 @@ function socketutil.file_sink(handle, io_err)
     end
 end
 
+function socketutil.safe_headers(headers)
+    local sensitive_headers = {
+        ["authorization"] = true,
+        ["cookie"] = true,
+        ["proxy-authorization"] = true,
+        ["set-cookie"] = true,
+    }
+    local safe_headers = {}
+    for key, value in pairs(headers) do
+        if sensitive_headers[key] then
+            safe_headers[key] = "REDACTED"
+        else
+            safe_headers[key] = value
+        end
+    end
+    return safe_headers
+end
+
+function socketutil.safe_request(request)
+    local sensitive_props = {
+        ["password"] = true,
+        ["user"] = true,
+    }
+    local safe_request = {}
+    for key, value in pairs(request) do
+        if sensitive_props[key] then
+            safe_request[key] = "REDACTED"
+        else
+            safe_request[key] = value
+        end
+    end
+    return safe_request
+end
+
 return socketutil