Parameter filtering in Rails 5

As a Rails developer you might be aware of all the password parameter used to be filtered by default by Rails application. What suppose if we need to filter other sensitive information like credit card  if we are handling in the application.

Rails 4:
config.filter_parameters += [:password]

The above scenario password key will be filtered if the params hash has password key whenever you submit a request and even it was filtered recursively. Password used to be filtered for all the below cases.

{username: 'abc', password: 'password' }
{user:  {name: 'abc', password: 'password' }}
{user:  {admin: {name: 'abc', password: 'password' }}}

Let me show you about credit card params hash which has credit card number and cvv code.

{credit_card: {number: '1234-5678-9123', code: '123'}}

config.filter_parameters += [:code]

Code filed used to be filterd whenever form submita request. Now we have a situation if any of the other form is having a key called 'code' in their form. Of course that is also to be filterd as usual. Because it was filtered recursively.

Rails 5:
{dealer: {name: 'dealer-1', code: 'ZXASAS'}}

We do not need to be filtered as it is not a sensitive information like password. We can display as usual like normal params. We can achieve this in Rails 5 by adding following config to your
config/initializers/filter_parameter_logging.rb

config.filter_parameters += ["credit_card .code"]

Here it was ignored as long as it was part of its parent.