Problem

For any errors, the referer url is logged here and only hardcoded query parameters are scrubbed. Our query includes custom params like "jwt-token" that are not scrubbed and hence this sensitive information is logged.

Proposed Solution

Can we update the configs such that we can pass in the list of url params to be scrubbed instead of a hardcoded list?

Additional context