Hiding password (etc) in web server log

[Jane]

Grinchly Greetings, Obi Wan!

I was interested in the solution you worked out for masking passwords in the web server log display during this week's webinar.

What you showed mostly works.   

BUT?  it still leaks passwords BEFORE they get to the AddLog section of code. 
As soon as you move around in the log and then come back to the POST, the value has been masked by the code you added in AddLog.  But initially it displays on the screen.

If there were an embed available in StartNewThread, before the ?web:LastPost is first displayed, that initial display of sensitive data could be avoided.

[Edited to add - would you add an embed before that DISPLAY statement ?  ]

Of course, that requires running the filtering code twice 

Holiday Cheers,

Jane