[ 
https://issues.apache.org/jira/browse/PHOENIX-2012?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14566246#comment-14566246
 ] 

Andrew Purtell commented on PHOENIX-2012:
-----------------------------------------

+1
This can also be a security problem, if DEBUG logging in production cannot 
carry potentially sensitive user data out of the cluster.

> RowKeyComparisonFilter logs unencoded data at DEBUG level
> ---------------------------------------------------------
>
>                 Key: PHOENIX-2012
>                 URL: https://issues.apache.org/jira/browse/PHOENIX-2012
>             Project: Phoenix
>          Issue Type: Improvement
>    Affects Versions: 4.4.0
>            Reporter: Nick Dimiduk
>            Assignee: Nick Dimiduk
>            Priority: Minor
>         Attachments: PHOENIX-2012.00.patch
>
>
> Noticed this while running verification tests. Occasionally the printed tuple 
> is interpreted by the shell and mangles the output for the rest of the test. 
> IF we're going to log data at all, should really be passing values through 
> some kind of ascii encoder. Also, don't print values, and or only do it at 
> TRACE.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to