gavinchou opened a new pull request, #69472:
URL: https://github.com/apache/doris/pull/69472
### What problem does this PR solve?
Several binlog, snapshot, and master-token RPC handlers log complete Thrift
requests at DEBUG or TRACE level. These requests can contain password, passwd,
or token credentials.
Remove the full-request logs from getBinlog, getBinlogLag, lockBinlog,
getSnapshot, restoreSnapshot, and getMasterToken. Existing non-sensitive
snapshot summary logs remain unchanged.
### Release note
Prevent authentication credentials from being written to FE logs by removing
verbose request logging from the affected RPCs.
### Check List
- [x] Test
- [x] `sh build.sh --fe`
- [x] `git diff --check`
- [x] No documentation changes are required.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
