Never log password value #7366

Author: PowerKiKi

src/Log/EventCompleter.php

@@ -72,8 +72,17 @@ private function getEnvData(): array
         return $envData;
     }
 
+    /**
+     * Remove password value from GraphQL variables well-known structure
+     */
     protected function removeSensitiveData(array $request): array
     {
+        foreach ($request as &$r) {
+            if (is_array($r)) {
+                unset($r['variables']['password']);
+            }
+        }
+
         return $request;
     }