Which URL query parameters stay visible after sanitizeUrl?

[clyxudev]

When logging URLs, which search params does sanitizeUrl keep by default?

[shnwazdeveloper]

sanitizeUrl() keeps common safe paging/search params by default: page, per_page, q, query, sort, order, limit, and offset. Other params are replaced with the redaction marker, and usernames or passwords in the URL are removed. You can override the allow-list with allowedParams.