Closed osher closed 2 years ago
thanks for opening this issue, however I see quite a few ways this could become a potential security issue. I would recommend to ask to implement this feature to maintainers of Verdaccio.
This is an application level feature. Pino accepts configuration and it is up to the developer to determine how that configuration is built.
This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
I think it would be useful that when
pino.destination(..)
is provided with a string - to interpolate env-vars if any.e.g.:, consiuder
then,
Use Case
The use-case is to be able to pass to applications that use pino (e.g.
verdaccio
) configuration that interpolates. I do not developverdaccio
- I use it, and it in turn usespino
(see here)So mind that explicitly do not pass to
pino.destination(...)
a template-expression - but a string that should interpolate once, on load time.more info - here my nick there is Radagast the Brown.
implementation
I think of something in the sort of:
would you embrace such a PR? if yes, I'll add this change + tests.