[
https://issues.apache.org/jira/browse/IGNITE-16936?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17534897#comment-17534897
]
Yury Gerzhedovich edited comment on IGNITE-16936 at 5/11/22 1:23 PM:
---------------------------------------------------------------------
As a solution could be don't print any parsing errors to server logs. Just send
to client.
I think it will be good solution even don't see to the security part. We
shouldn't log user mistakes
was (Author: jooger):
As a solution could be don't print any parsing errors to server logs. Just send
to client.
> Incorrect DML syntax error message contains sensitive information
> -----------------------------------------------------------------
>
> Key: IGNITE-16936
> URL: https://issues.apache.org/jira/browse/IGNITE-16936
> Project: Ignite
> Issue Type: Bug
> Reporter: Luchnikov Alexander
> Priority: Major
> Labels: ise
> Attachments:
> IGNITE-16936_Ignore_IGNITE_TO_STRING_INCLUDE_SENSITIVE_in_wrong_syntax_DML_error_message_-.patch
>
>
> Incorrect DML syntax error message contains sensitive information.
> Regardless of the value of IGNITE_TO_STRING_INCLUDE_SENSITIVE.
> Reproducer
> [^IGNITE-16936_Ignore_IGNITE_TO_STRING_INCLUDE_SENSITIVE_in_wrong_syntax_DML_error_message_-.patch]
> show what SENSITIVE contains in message.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
