elastic / elastic/support-diagnostics
Sanitization scrub does not Sanitize seed_hosts Field
Open
- Dominant language
- Java
- Stars
- 304
- Forks
- 175
- PR merge metrics
- No merged PRs in 30d
Description
Description
The diagnostic scrubber is not sanitizing the seed_hosts field, causing original hostnames to be preserved in the output. This represents a potential data leak in the sanitized files.
It appears we might be missing a general-purpose hostname scrubbing function, which is likely why this field was overlooked.
Suggested Solution
We should update the scrubber to properly anonymize the hostnames within the seed_hosts list. This will ensure our diagnostics are fully anonymized and prevent accidental data exposure.
Contributor guide
Assessment
This issue has not been assessed yet.