This repository was archived by the owner on May 19, 2020. It is now read-only.
This repository was archived by the owner on May 19, 2020. It is now read-only.
[security] No need to log a merged config. #2
Closed
Description
IMHO there's no need to log a merged config.
It can rise a security problem due to exposure of a sensible data, like passwords / addresses.
This issue can be addressed by :
- not logging merged config it at all
- introduction of a new tag for sencible info and then check it and masking sensible data before loging
Metadata
Metadata
Assignees
Labels
No labels