Prevent Sensitive Information in ToString() Overrides of HTTP Classes #97
Description
The current ToString() overrides in HTTP-related classes (e.g., HttpContext, HttpRequest, HttpResponse) risk exposing sensitive information.
To mitigate this risk, we propose removing the overridden ToString() methods in these classes and instead utilizing the logging framework for request and response logging. Logging provides support for masking or excluding sensitive headers and information.