phingofficial / phingofficial/phing
Mask passwords in VERBOSE logs when running Phing in debug mode?
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 1.2k
- Forks
- 319
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
Right now all properties are logged with VERBOSE level on. This is critical in some situations, especially if passwords are involved (MySql for instance)
Describe the solution you'd like
It wolud be nice to add an attribute (hideoutput=true/false or disguiseoutput=true/false) to solve this problem.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file, test, or entry point is identified. Start by tracing where properties are emitted at VERBOSE level in debug mode, then define how a hideoutput or disguiseoutput attribute should behave. Done means sensitive property values, including passwords, no longer appear in those logs while ordinary output remains available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100