Add tests for plaintext leaking in logs
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 32/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- go
- Domain
- backend, security, testing-qa
Research direction
No files or tests are named. Start by tracing the API's logging and stdout paths, then determine how verbose logging should be enabled. Done means tests verify that stdout and log files do not contain the chosen plaintext sentinel strings.
Written by the indexing model from the issue text.
Description
It's very important we don't leak plaintext messages in logs. We should be able to test that stdout/log files do not contain certain sentinel strings. This may require some kind "please enable verbose logging" option in the API.
- Dominant language
- Go
- Stars
- 18
- Forks
- 12
- Avg merge
- 1h 20m
- Merged PRs (30d)
- 3
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from matrix-org/complement-crypto
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
matrix-org/complement-crypto#268 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
matrix-org/complement-crypto#212 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
matrix-org/complement-crypto#199 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
matrix-org/complement-crypto#193 · 1 reaction ·
-
Tests flaking due to `websocket url timeout reached`May be free again @richvdh claimed this 201 days ago, and no pull request is open. Open
matrix-org/complement-crypto#158 · 4 comments · 1 assignee ·
All issues in matrix-org/complement-crypto
Similar issues
-
area/tests theme/ci-dx
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
bug needs triage pkg/translator/faro
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
open-telemetry/opentelemetry-collector-contrib#51759 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
appbaseio/reactivesearch-api#402 ·
-
GET /api/v1/system/api_keys returns the full API token in plaintextPossibly taken @Harsh23Kashyap claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
infiniflow/ragflow#20555 · 1 reaction ·
Maintainers usually reply within 1 day