3 ms·
>allowing passwords to hit the logging infrastructure. This is the most ridiculous of the three in my opinion. When logging to elasticsearch you programmatical
by adossi 8y ago
>allowing passwords to hit the logging infrastructure.
This is the most ridiculous of the three in my opinion. When logging to elasticsearch you programmatically have to say what data to put in the document before its indexed (and thus viewable via Kibana). This means that the developer actually put the password as a parameter in the document object.
- cjbprime 8y agoNot necessarily, it could just be total and indiscriminate logging of HTTP requests.