apache / apache/doris

[Bug] Doris BE leaks auth headers by logging every Stream Load HTTP header verbatim at INFO

Open
#64,514 2 comments 0 reactions 1 assignee Claimed by @oldkingnana View on GitHub
Dominant language
Java
Stars
15.9k
Forks
3.9k
Avg merge
2d 23h
Merged PRs (30d)
522

Description

### Search before asking

- [x] I had searched in the [issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no similar issues.

### Version

4.1.2-rc01

### What's Wrong?

As per title, auth headers get leaked in logs at level INFO

This was already fixed for 4.0.X, but has regressed again in 4.1.X . See: https://github.com/apache/doris/pull/59743

For example, I see 4.0.6 is OK, but it is not fixed as of 4.1.2-rc01 (latest 4.1.x tag)

### What You Expected?

To not leak creds

### How to Reproduce?

_No response_

### Anything Else?

_No response_

### Are you willing to submit PR?

- [x] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.