Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent sensitive information like user passwords from being logged/captured #12555

Closed
Tracked by #12214
akolson opened this issue Aug 13, 2024 · 1 comment
Closed
Tracked by #12214
Labels
DEV: backend Python, databases, networking, filesystem... gsoc A GSoC project task

Comments

@akolson
Copy link
Member

akolson commented Aug 13, 2024

Overview

We should not capture sensitive information like passwords during error reporting

Description and outcomes

  • Check request headers for any sensitive information and remove it before capturing the eror.

Acceptance Criteria

  • No sensitive information exists in captured erors

Assumptions and Dependencies

  • NA

Scope

  • Prevent capture and transmission of sensitive information in errors

Accessibility Requirements

NA

Resources

@rtibbles
Copy link
Member

Fixed in #12660

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
DEV: backend Python, databases, networking, filesystem... gsoc A GSoC project task
Projects
None yet
Development

No branches or pull requests

2 participants