diff --git a/internal/middleware/csrf.go b/internal/middleware/csrf.go
index 92b870c..071570c 100644
--- a/internal/middleware/csrf.go
+++ b/internal/middleware/csrf.go
@@ -46,16 +46,14 @@ func CSRF(cfg *config.Config) gin.HandlerFunc {
 		}
 
 		if subtle.ConstantTimeCompare([]byte(cookieToken), []byte(headerToken)) != 1 {
-			log.Printf("[CSRF] MISMATCH | path=%s | cookie(len=%d)=%q | header(len=%d)=%q",
-				c.Request.URL.Path, len(cookieToken), cookieToken, len(headerToken), headerToken)
+			log.Printf("[CSRF] MISMATCH | path=%s | cookie_len=%d | header_len=%d",
+				c.Request.URL.Path, len(cookieToken), len(headerToken))
 			c.AbortWithStatusJSON(http.StatusForbidden, gin.H{
 				"success": false, "message": "CSRF 验证失败",
 			})
 			return
 		}
 
-		log.Printf("[CSRF] OK | path=%s | token(len=%d)=%q", c.Request.URL.Path, len(cookieToken), cookieToken)
-
 		c.Set(csrfMetaName, cookieToken)
 		c.Next()
 	}