Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PostgreSQLConnectionFactory logs eintire db configuration including password #226

Closed
mrayne opened this issue Feb 19, 2021 · 2 comments
Closed

Comments

@mrayne
Copy link

mrayne commented Feb 19, 2021

The PostgreSQLConnectionFactory the entire config on DEBUG level:

    init {
        logger.debug { "PostgreSQLConnectionFactory created with configuration $configuration" }
    }

Either the toString function should possibly be overwritten to not log sensitive data or the log message should be removed. A workaround would be to create your own connection factory class.

@github-actions
Copy link

Thank you for reporting an issue. See the wiki for documentation and gitter for questions.

@oshai
Copy link
Contributor

oshai commented Feb 19, 2021

Thanks for reporting. I will change that although it's only in debug level.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants