search

eclecticiq / OpenTAXII

TAXII server implementation in Python from EclecticIQ
BSD 3-Clause "New" or "Revised" License
189 stars 89 forks source link

Database credentials should be redacted when written to stdout #181

Closed tdonahue closed 3 years ago

tdonahue commented 3 years ago

I'm testing opentaxii in kubernetes. Database credentials are displayed when opentaxii is started. This allows people to see them in the logs.

The credentials, or at least the password, should be redacted before being printed. Or alternatively, an environment variable could be used to indicate that only errors should be printed to stdout (and not the config data)

tdonahue commented 3 years ago

I just noticed that the docker image, which I was testing, is not current. The latest version does not print the database credentials to stdout