rollbar / rollbar-php-laravel

Rollbar error monitoring integration for Laravel projects
https://docs.rollbar.com/docs/laravel
140 stars 39 forks source link

.env value expose in log #111

Closed EvilTwin01 closed 2 years ago

EvilTwin01 commented 3 years ago

Rollbar capture all the .env value and display it inside the log. This lead to security concern. Is there any way to hide this? Issue found on laravel running on vapor. 2021-05-31 01 46 33

bxsx commented 2 years ago

Hi @EvilTwin01

Thanks for reporting and sorry for the confusion. You can use scrub_fields to remove any sensitive data. Please visit https://docs.rollbar.com/docs/php-configuration-reference for more information.

If you want more control, you can also take an interest in the transformer class. Here is an example: https://github.com/rollbar/rollbar-php-examples/tree/master/transformer

Let me know if this works for you :)

bxsx commented 2 years ago

Closing the issue.

@EvilTwin01 please let me know if the proposed solution does not work for you, so I will reopen it. Thanks