Skip to content
This repository was archived by the owner on May 19, 2020. It is now read-only.
This repository was archived by the owner on May 19, 2020. It is now read-only.

[security] No need to log a merged config. #2

Closed
@Zensey

Description

@Zensey

IMHO there's no need to log a merged config.
It can rise a security problem due to exposure of a sensible data, like passwords / addresses.

This issue can be addressed by :

  • not logging merged config it at all
  • introduction of a new tag for sencible info and then check it and masking sensible data before loging

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions