Sanitizing Cloudflare Logs to protect customers from the Log4j vulnerability

What this post added

This post details the implementation of a new feature within Cloudflare Logs to automatically redact the `${` token, which is a key indicator for the Log4j vulnerability (CVE-2021-44228). This mitigation is applied to logs sent to customers via Logpush jobs by enabling a `CVE-2021-44228=true` option through the API. The post explains the attack vector and the necessity of redacting obfuscated variants of the token, highlighting the challenge of balancing security with the need to preserve legitimate log data.