Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

no control over snap-server exceptions (and logging of HTTP params) #135

Open
pheaver opened this issue May 16, 2012 · 0 comments
Open

no control over snap-server exceptions (and logging of HTTP params) #135

pheaver opened this issue May 16, 2012 · 0 comments

Comments

@pheaver
Copy link

pheaver commented May 16, 2012

You can set an exception handler in the Config, but it only applies to some exceptions. Snap.Internal.Http.Server.httpSession catches and logs exceptions, and it includes the HTTP params in the request. The params contain sensitive information that we must not log, so our only options are:

  • Turn off all logging with setErrorLog ConfigNoLog
  • Define an error log action that attempts to parse the message and find sensitive params (yikes!)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant