Merge pull request #12681 from kjellwinblad/kjell/rocketmq_conn/remov…

…e_secret_from_logs/EMQX-11987 fix: redact secrets from RocketMQ debug log
emqx · Mar 13, 2024 · 9d99992 · 9d99992
2 parents d723a5e + f502ba8
commit 9d99992
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/apps/emqx_bridge_rocketmq/src/emqx_bridge_rocketmq_connector.erl b/apps/emqx_bridge_rocketmq/src/emqx_bridge_rocketmq_connector.erl
@@ -244,7 +244,7 @@ do_query(
     ?TRACE(
         "QUERY",
         "rocketmq_connector_received",
-        #{connector => InstanceId, query => Query, state => State}
+        #{connector => InstanceId, query => Query, state => redact(State)}
     ),
     ChannelId = get_channel_id(Query),
     #{

diff --git a/changes/ee/fix-12681.en.md b/changes/ee/fix-12681.en.md
@@ -0,0 +1 @@
+When sending messages to a RocketMQ bridge/action while debug level logging was activated, secrets could be emitted in debug level log messages. This has now been fixed.