Chrome extension for server side console logging

About

Chrome Logger is a Google Chrome extension for debugging server side applications in the Chrome console.

Most languages include their own logging capabilities, but sometimes it is easier to see your logs right in the browser.

Chrome Logger used to be known as ChromePHP.

Usage

Using Chrome Logger is simple:

  1. Install the Chrome Logger extension for Google Chrome.
  2. Click the extension icon to enable logging for the current tab’s domain (It will light up blue).
    toggle icon
  3. Install a server side library for your language.
  1. Add some log statements
# django example
import chromelogger as console
from django.http import HttpResponse


def index(request):
    response = HttpResponse("Hello, world. You're at the poll index.")
    console.log('Hello console!')
    console.log(request.user)
    return response
  1. Check the console!
    animated console

Configuring

Chrome Logger has a few options. Right click on the extension icon and select Options to see them
selecting options

Technical Stuff

Chrome Logger is an open protocol. Currently there are libraries available for PHP, Python, Ruby, and Node, but there is no reason to be limited to those languages. Go to the tech spec to see more information about how to create your own library.

Security

Please remember that Chrome Logger works by transmitting server data to the client via an HTTP header in the response. Therefore you should be aware that any data you send could be accessed by attackers and third-parties if you are not careful.

You should make sure to follow these best practices:

  • Do not send logs from a production environmentIn your application you could handle this by reading a config file and only sending logs if it is a test/development/staging/qa environment.
  • Do not include any sensitive information with your logsIf you have to use Chrome Logger in a production environment for some reason then you should not log any data that an attacker or malicious individual could take advantage of.Avoid things like session identifiers/credit card numbers/user passwords/etc.
  • Set up permissions so that only certain authenticated users will see the logsIf you need to have logs available in a production environment then you should set up roles/permissions so that only admins and support personnel can see them