gavinchou opened a new pull request, #69736: URL: https://github.com/apache/doris/pull/69736
### What problem does this PR solve? Backport https://github.com/apache/doris/pull/69472 to `branch-4.1`. Several binlog, snapshot, and master-token RPC handlers log complete Thrift requests at DEBUG or TRACE level. These requests can contain password, passwd, or token credentials. Remove the full-request logs from `getBinlog`, `getBinlogLag`, `lockBinlog`, `getSnapshot`, `restoreSnapshot`, and `getMasterToken`. Existing non-sensitive snapshot summary logs remain unchanged. Cherry-picked from commit `e2dbcb8b1ad9d68147f91e81db1d45de4bdda794`. ### Release note Prevent authentication credentials from being written to FE logs by removing verbose request logging from the affected RPCs. ### Check List - [x] `sh build.sh --fe` - [x] `git diff --check` - [x] No documentation changes are required. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
