#1 2016-02-15 16:44:07

fabioxgn
Member
Registered: 2015-11-06
Posts: 34

Disable logging of environment variables on server startup

I'm forwarding the logs to papertrail and there are some sensitive information on environment variables.

By default mORMot is logging all env vars, is there a coniguration to disable it?

Offline

#2 2016-02-15 19:24:53

ab
Administrator
From: France
Registered: 2010-06-21
Posts: 14,659
Website

Re: Disable logging of environment variables on server startup

Putting sensitive information in environment variable is VERY unsecure.
Why not just run the application with another user?

Anyway, I have added the new TSynLogFamily.NoEnvironmentVariable property for you.
See http://synopse.info/fossil/info/df3a670d33

Offline

#3 2016-02-16 11:32:44

fabioxgn
Member
Registered: 2015-11-06
Posts: 34

Re: Disable logging of environment variables on server startup

ab wrote:

Putting sensitive information in environment variable is VERY unsecure.
Why not just run the application with another user?

Anyway, I have added the new TSynLogFamily.NoEnvironmentVariable property for you.
See http://synopse.info/fossil/info/df3a670d33

Thanks!

Offline

Board footer

Powered by FluxBB