The current implementation of Microsoft.Extensions.Http logging framework redact headers value based on user input however it does not support redact sensitive information from query parameters, which is kind of security issue.

For customers that are more concerned about this logging risk or have to meet audit requirements for all their integrated services it is important to redact query parameters value based on users input.

The problem lies here -

We could implement this feature same way as we have a extension in IHttpClientBuilder to redact from header.

We might name this extension RedactLoggedQueryParameters

Thanks,
Ankit S