prevents revealing x-forwarded-for ip addresses in HTTP logs

src/server.ts

@@ -25,6 +25,7 @@ app.use(
         "req.headers.cookie",
         'res.headers["set-cookie"]',
         "req.headers.authorization",
+        "req.headers.x-forwarded-for",
       ],
       censor: "********",
     },