sentrysoftware / metricshub

Universal Metrics Collection for OpenTelemetry
https://metricshub.com
GNU Affero General Public License v3.0
15 stars 4 forks source link

Prevent sensitive configuration details from being displayed in error logs #472

Closed CherfaElyes closed 3 weeks ago

CherfaElyes commented 3 weeks ago

Problem Statement

An issue has been observed where a typo in the --wbem-transport parameter (e.g., "htpts" instead of "https") causes MetricsHub to reject the command as expected. However, the resulting error message displays the entire WbemConfiguration object, including sensitive details like the password, which should not appear in the logs.

Since configuration data can contain sensitive information, displaying configuration objects should be avoided in error logs.