✨ Provide grep'able character/ flag to debug log to disable sensitive information for bug reports.
See original GitHub issueIt’s mentioned in README.md that extended/debug logging can expose sensitive data. Preempting the eventual need for sharing bug reports with the pincer dev team, I’d like to both request and then suggest the following:
I’d request that a flag be added to the debug log to disable sensitive information from being written to logs for the sake of data protection/safety. Alternatively produce matched logs with one containing sensitive data, the other without.
Quick suggestion for Linux (be they GNU, alpine or other), and BSD installs:
If the implementation above is deemed too difficult to implement at this stage, possibly add the phrase
[shareable] in front of any debug lines that are not sensitive.
That way a simple
cat "foo.log" | grep [shareable] >> "bar.log"
would produce a shareable debug log minus sensitive data, without creating much if any code debt, relying on sys libs and programs guaranteed to have a stable posix interface (cat, grep and the “|” piping mechanism )
The above would strip any and all lines that would have contained sensitive data from foo.log
and is a simple mechanism for implementing different logging levels.
Issue Analytics
- State:
- Created 2 years ago
- Comments:5 (5 by maintainers)
Top GitHub Comments
I think the best thing to do here is update our readme since it seems pretty outdated.
The updated readme has been merged