search

logstash-plugins / logstash-input-kinesis

Logstash Plugin for AWS Kinesis Input
Apache License 2.0
45 stars 57 forks source link

`http_proxy` containing credentials leaks in the debug logs. #96

Closed mashhurs closed 1 year ago

mashhurs commented 1 year ago

Issue description

When Logstash is registering the plugin, it loads the plugin configs and if running in debug mode, http_proxy value can be seen in the logs.

Expectation

http_proxy shouldn't be leaked in debug logs, changing its type to Logstash::Util::Password would help.