[GitHub] wyc opened a new issue #897: Some passwords show up in the logs

[GitBox <gi...@apache.org>]

wyc opened a new issue #897: Some passwords show up in the logs
URL: https://github.com/apache/couchdb/issues/897
 
 
   <!--- Provide a general summary of the issue in the Title above -->
   
   ## Expected Behavior
   <!--- If you're describing a bug, tell us what should happen -->
   <!--- If you're suggesting a change/improvement, tell us how it should work -->
   Passwords shouldn't show up in the logs.
   
   ## Current Behavior
   <!--- If describing a bug, tell us what happens instead of the expected behavior -->
   <!--- If suggesting a change/improvement, explain the difference from current behavior -->
   A password showed up in the logs: https://pastebin.com/rNSeTrtK
   
   ## Possible Solution
   <!--- Not obligatory, but suggest a fix/reason for the bug, -->
   <!--- or ideas how to implement the addition or change -->
   Hide the password from the logs, and investigate other occurrences.
   
   ## Steps to Reproduce (for bugs)
   <!--- Provide a link to a live example, or an unambiguous set of steps to -->
   <!--- reproduce this bug. Include code to reproduce, if relevant -->
   The steps here:
   https://github.com/apache/couchdb/issues/896
   
   ## Context
   <!--- How has this issue affected you? What are you trying to accomplish? -->
   <!--- Providing context helps us come up with a solution that is most useful in the real world -->
   
   Discovered during https://github.com/apache/couchdb/issues/896, but probably worth its own ticket.
   ```
   171925 < wayne> https://pastebin.com/rNSeTrtK
   171951 < wayne> and yikes, it looks like the password gets leaked in the logs
   ```
   ## Your Environment
   <!--- Include as many relevant details about the environment you experienced the bug in -->
   * Version used: 2.1
   * Browser Name and version: Chromium
   * Operating System and version (desktop or mobile): Desktop
   * Link to your project: N/A
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services