#3822 Don't log Negotiate or cookies
Opened 10 years ago by rcritten. Modified 7 years ago

The client installer log may log the full Kerberos Negotiate header and Set-Cookie output. This in itself isn't a huge problem, but if this log is posted to a public list there is some amount of exposure to the poster.

These values are not exactly critical for someone troubleshooting an install failure so we should obfuscate these values.


Metadata Update from @rcritten:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

7 years ago

Log in to comment on this ticket.

Metadata