API7 Docs
SecurityData Mask

Data Mask Configuration

Parameters

See plugin common configurations for configuration options available to all plugins.

  • requestarray[object] · optional

    An array of actions to mask sensitive information in the request.

    • typestring · required

      Valid values: query, header, or body

      Location where sensitive information should be masked.

    • body_formatstring · optional

      Valid values: json or urlencoded

      Encoding of the request body. Required when type is body.

    • namestring · required

      Name of the information field that contains sensitive data. For JSON body, you can use JSONPath syntax.

    • actionstring · required

      Valid values: regex, replace, or remove

      Action to mask the sensitive data.

    • regexstring · optional

      Regular expressions to match the sensitive data. Required when action is regex.

    • valuestring · optional

      Value to replace the sensitive data with. Required when action is regex or replace.

  • max_body_sizeinteger · optional · default: 1048576

    Maximum body size allowed in bytes. If a request's body size exceeds the configured value, data masking rules will be ignored.

  • max_req_post_argsinteger · optional · default: 100

    Valid values: greater than or equal to 0

    Maximum number of URL-encoded form fields to parse when masking request body data with body_format set to urlencoded.