fix: redact cookie headers to prevent information leaks

[joragua]

Related Issues

Comes from: https://kiteworks.atlassian.net/browse/OC10-95

It depends on the redact_auth_header_logs configuration in setup.xml. If it is set to true, the values of the cookie headers (Cookie and Set-Cookie) are replaced with [redacted] (the same as the Authorization header)

Reference: #4249

• Add changelog files for the fixed issues in folder changelog/unreleased. More info here
• Add feature to Release Notes in ReleaseNotesViewModel.kt creating a new ReleaseNote() with String resources (if required)

---

QA

[jesmrec]

Two changes, @joragua

[jesmrec]

CR Approved, moving to QA 🚀

[jesmrec]

QA checks:

1. redact_auth_header_logs as true (oC10 & oCIS)

• Cookie header -> must be redacted (only oC10)
• Set-Cookie header -> must be redacted (only oC10)
• Authentication header -> must be redacted

2. redact_auth_header_logs as false (oC10 & oCIS)

• Cookie header -> not redacted (only oC10)
• Set-Cookie header -> not redacted (only oC10)
• Authentication header -> not redacted

3. Change value of redact_auth_header_logs

• from false to true
• from true to false

[jesmrec]

Approved on my side!