Hacker News Reader

If you log all payloads now your logs are subject to DPA and possibly also PCI - potential security fail.

That was one thing I noticed as well; selective logging of request parameters is safer, but requires more effort.

What are DPA and PCI?

And HIPAA privacy regulations for PHI/PII, if you're dealing with healthcare data.