Password sould not be printed in terminal and saved in 2-Microsoft PostgreSQL.log

[pbptaker]

The extension prints the DB-password in an unsave manner in the terminal. This output is then saved to

%APPDATA%\Code\logs\X\windowZ\exthost\output_logging_X\2-Microsoft PostgreSQL.log
where X is an ID, I guess the vscode version ID. And Z probably just the number of openend vscode window.

Please do mask the password in the terminal and in the corresponding log file. Thank you

[mmcfarland]

Thanks for bringing this to our attention @pbptaker. I wasn't able to find passwords or sensitive information in the logs during my testing. If you still have access to that file, can you provide any strings/text that might help identify what context you saw it in? For example, each log line typically has a bracketed submodule name such as `[ObjectExplorerService]', but any text or even adjacent log line output would be helpful in trying to identify/reproduce this.

[Kaiden42]

I've found the password printed in the Extension Logs (PGSQL: Show Extension Logs) when the token is refreshed:

[mmcfarland]

Thanks so much @Kaiden42, we'll get this logging removed.

[mmcfarland]

Hi @Kaiden42 and @pbptaker, we've released a fix in pre-release version 1.9 that should resolve this issue. It should be available if you opt-in to the pre-release version channel for this extension in VS Code. The fix should roll out to all users in stable-release 1.10 in about a week. Please let us know if this resolves your issue. See the full changelog here.

[mmcfarland]

Fixed in v1.10