RocketChat / Rocket.Chat.Apps-engine

The Rocket.Chat Apps engine and definitions.

Home Page:https://rocketchat.github.io/Rocket.Chat.Apps-engine/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Possibility to mask sensitive data in Http request logs

cuonghuunguyen opened this issue · comments

Description

Our HTTP bridge now logs all of the request information to the stdout. For some apps, we may need the credentials or tokens from the user to communicate with the external services. That information should not be logged into the stdout because it could be a security vulnerability.

Expectation

Sensitive data is masked before being logged into stdout

Actual behavior

All of the request info is logged into the stdout