Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Exclude additional sensitive information from mealie logs #4218

Conversation

bigcat2014
Copy link
Contributor

What type of PR is this?

(REQUIRED)

  • bug
  • cleanup

What this PR does / why we need it:

(REQUIRED)
Add LDAP_QUERY_PASSWORD, OIDC_CLIENT_ID, and OPENAI_API_KEY to the list of excluded settings when logging.

Which issue(s) this PR fixes:

(REQUIRED)
Fixes #4217

Testing

Run Mealie and view the logs, you should no longer see the above listed variables printed to the log on startup.

@cmintey
Copy link
Contributor

cmintey commented Sep 16, 2024

OIDC_CLIENT_ID is not sensitive

Copy link
Collaborator

@boc-the-git boc-the-git left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mealie/app.py Outdated Show resolved Hide resolved
@boc-the-git boc-the-git enabled auto-merge (squash) September 21, 2024 22:00
@boc-the-git boc-the-git merged commit c774f62 into mealie-recipes:mealie-next Sep 21, 2024
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[BUG] - Mealie exposes sensitive information in log files
3 participants