using sensitive_post_parameters to hide password in email report

[John DeAngelis]

Hello,


If I mangle the CSRF token in the Django login form, and then try to login, I get a:


HTTP 403 CSRF verification failed. Request aborted


which is expected.


This then will generate an email that is sent to the admins but the email contains the password from the login form in clear text which I do not want.


I assumed that sensitive_post_params() would hide the password in POST in the email report but it did not.


Is there a way to hide the password in the email report?




Thank you,

John