Major It appears that credentials and tokens are logged by Nuxeo Drive => this is not essential information for investigation and they should be removed from the logs. Note that a username should be kept, because it may be useful to validate a connection, but not the password.
Maybe other sensitive information should be removed but we'll have to discuss if they are useful for any investigation the Drive team or the Support team could do.
- depends on
-
NXDRIVE-2880 Remove message on DEBUG log level
-
- Resolved
-
- is related to
-
-
- Resolved
-
-
-
- Resolved
-
(2 mentioned in)
1.
|
Test Sensitive information update |
|
Resolved | anroy |