Uploaded image for project: 'Nuxeo Drive '
  1. Nuxeo Drive
  2. NXDRIVE-2828

Remove sensitive information from Drive logs

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.4.0
    • Component/s: Logging
    • Tags:
    • Backlog priority:
      800
    • Sprint:
      nxdrive #39, nxdrive #40
    • Story Points:
      5

      Description

      It appears that credentials and tokens are logged by Nuxeo Drive => this is not essential information for investigation and they should be removed from the logs. Note that a username should be kept, because it may be useful to validate a connection, but not the password.

      Maybe other sensitive information should be removed but we'll have to discuss if they are useful for any investigation the Drive team or the Support team could do.

        Attachments

          Issue Links

          There are no Sub-Tasks for this issue.

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: