def remove_sensitive_data(data):
    """
    Removes token or WSkey from url and token from a request header.
    WSkey has always 80 characters.

    Args:
        obj: str or dict,   response or request url, or request.header attribute
    """
    if type(data) == str:
        start_pos = data.index('wskey=')
        data = f'{data[:start_pos + 6]}WSKEY-HERE{data[start_pos + 86:]}'
    elif type(data) == dict:
        try:
            data['Authorization'] = 'AUTH-HERE'
        except IndexError:
            pass
    return data
