elastic / elastic/support-diagnostics

Sanitization scrub does not Sanitize seed_hosts Field

Open
#877 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
304
Forks
175
PR merge metrics
No merged PRs in 30d

Description

Description
The diagnostic scrubber is not sanitizing the seed_hosts field, causing original hostnames to be preserved in the output. This represents a potential data leak in the sanitized files.

It appears we might be missing a general-purpose hostname scrubbing function, which is likely why this field was overlooked.

Suggested Solution
We should update the scrubber to properly anonymize the hostnames within the seed_hosts list. This will ensure our diagnostics are fully anonymized and prevent accidental data exposure.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.