Best solution/workaround sanitise modsecurity v3

[cello86]

** Description of the bug **
On modsecurity v3 and OWASP CRS 4.x there are a lot of password rule matching and we notice the password printed into the modsecurity audit logs. We also noticed that sanitiseArg is not supported on v3 branch.

Do you plan to support in the near future this important function?

Do you aware of a better method than removing the printed part of values ​​via SecAuditLogParts?

The found some issue related to the sanitise implementation on v3 branch like:

#1132
#1898

[airween]

Hi @cello86,

thanks for reporting this issue.

Yes, unfortunately this feature is still missing from libmodsecurity3.

We have a shortage of resources, but I try to keep this in the foreground, and fix that in near future.

[cello86]

@airween thanks for the confirmation. This is a essential feature to have e GDPR compliant WAF without rollback to v2 branch.