Currently, the full MongoDB connection options object is displayed at INFO level in logs. This options object contains the db credentials, so the log exposes those credentials. I think it's better to remove the options object from logs (the host and port are kept).
Currently, the full MongoDB connection options object is displayed at INFO level in logs. This options object contains the db credentials, so the log exposes those credentials. I think it's better to remove the options object from logs (the host and port are kept).