Sensitive message information is now masked from logging.

Fixes #243

1 files changed, 10 insertions, 0 deletions

diff --git a/src/DotNetOpenAuth.Core/Messaging/Reflection/MessagePart.cs b/src/DotNetOpenAuth.Core/Messaging/Reflection/MessagePart.cs
index b2c4664..0f140d6 100644
--- a/src/DotNetOpenAuth.Core/Messaging/Reflection/MessagePart.cs
+++ b/src/DotNetOpenAuth.Core/Messaging/Reflection/MessagePart.cs
@@ -115,6 +115,7 @@ namespace DotNetOpenAuth.Messaging.Reflection {
 			this.RequiredProtection = attribute.RequiredProtection;
 			this.IsRequired = attribute.IsRequired;
 			this.AllowEmpty = attribute.AllowEmpty;
+			this.IsSecuritySensitive = attribute.IsSecuritySensitive;
 			this.memberDeclaredType = (this.field != null) ? this.field.FieldType : this.property.PropertyType;
 			this.defaultMemberValue = DeriveDefaultValue(this.memberDeclaredType);
 
@@ -189,6 +190,15 @@ namespace DotNetOpenAuth.Messaging.Reflection {
 		internal bool IsConstantValueAvailableStatically { get; set; }
 
 		/// <summary>
+		/// Gets or sets a value indicating whether the value contained by this property contains
+		/// sensitive information that should generally not be logged.
+		/// </summary>
+		/// <value>
+		/// <c>true</c> if this instance is security sensitive; otherwise, <c>false</c>.
+		/// </value>
+		internal bool IsSecuritySensitive { get; set; }
+
+		/// <summary>
 		/// Gets the static constant value for this message part without a message instance.
 		/// </summary>
 		internal string StaticConstantValue {