Description: Enabling SE_DEBUG routes Selenium/package logs to System.err at FINE level via a new
handler, which can inadvertently expose sensitive data (e.g., URLs with embedded
credentials, session IDs, capabilities, or auth tokens) to console/CI logs.
Debug.java [48-71]

public static boolean isDebugAll() {
  return Boolean.parseBoolean(System.getenv("SE_DEBUG"));
}

public static void configureLogger() {
  if (!isDebugAll() || loggerConfigured) {
    return;
  }

  Logger logger = Logger.getLogger("org.openqa.selenium");
  logger.setLevel(Level.FINE);

  Handler handler =
      new StreamHandler(System.err, new DebugLogFormatter()) {
        @Override
        public synchronized void publish(java.util.logging.LogRecord record) {
          super.publish(record);
          flush();
        }
      };
  handler.setLevel(Level.FINE);


 ... (clipped 3 lines)

Follow the guide to enable codebase context checks.

Objective: To create a detailed and reliable record of critical system actions for security analysis
and compliance.

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure all identifiers clearly express their purpose and intent, making code
self-documenting

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure comprehensive error handling that provides meaningful context and graceful
degradation

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent
vulnerabilities

Status: Passed

Learn more about managing compliance generic rules or creating your own custom rules

Objective: To prevent the leakage of sensitive system information through error messages while
providing sufficient detail for internal debugging.

Status:
Debug to stderr: Enabling SE_DEBUG configures a global JUL handler that emits FINE Selenium logs to
System.err, which may expose internal details to end-users depending on runtime usage and
log content.

public static void configureLogger() {
  if (!isDebugAll() || loggerConfigured) {
    return;
  }

  Logger logger = Logger.getLogger("org.openqa.selenium");
  logger.setLevel(Level.FINE);

  Handler handler =
      new StreamHandler(System.err, new DebugLogFormatter()) {
        @Override
        public synchronized void publish(java.util.logging.LogRecord record) {
          super.publish(record);
          flush();
        }
      };
  handler.setLevel(Level.FINE);
  logger.addHandler(handler);
  loggerConfigured = true;
}

Learn more about managing compliance generic rules or creating your own custom rules

Objective: To ensure logs are useful for debugging and auditing without exposing sensitive
information like PII, PHI, or cardholder data.

Status:
Unstructured stderr logs: When SE_DEBUG is set, logging is forced to FINE and routed to stderr which can increase
risk of sensitive data appearing in unstructured logs depending on what downstream
components log at debug level.

if (Debug.isDebugAll()) {
  configLevel = Level.FINE.getName();
}

try {
  level = Level.parse(configLevel.toUpperCase(Locale.ROOT));
} catch (IllegalArgumentException e) {
  // Logger is not configured yet
  new ConfigException(
          "Unable to determine log level from "

Learn more about managing compliance generic rules or creating your own custom rules

The current logging initialization in a static block in RemoteWebDriver is
unreliable. It should be moved to explicit entry points like DriverService
builders and LoggingOptions to ensure consistent behavior.

Examples:

  static {
    org.openqa.selenium.internal.Debug.configureLogger();
  }

  public static void configureLogger() {
    if (!isDebugAll() || loggerConfigured) {
      return;
    }

    Logger logger = Logger.getLogger("org.openqa.selenium");
    logger.setLevel(Level.FINE);

    Handler handler =
        new StreamHandler(System.err, new DebugLogFormatter()) {

 ... (clipped 10 lines)

Solution Walkthrough:

Before:

// In java/src/org/openqa/selenium/remote/RemoteWebDriver.java
public class RemoteWebDriver implements WebDriver, ... {
  static {
    // Logging is configured here, dependent on this class being loaded.
    org.openqa.selenium.internal.Debug.configureLogger();
  }
  // ...
}

// In java/src/org/openqa/selenium/internal/Debug.java
public class Debug {
  private static boolean loggerConfigured = false;
  public static void configureLogger() {
    if (!isDebugAll() || loggerConfigured) {
      return;
    }
    // ... configure logger for "org.openqa.selenium"
    loggerConfigured = true;
  }
}

After:

// In java/src/org/openqa/selenium/remote/RemoteWebDriver.java
public class RemoteWebDriver implements WebDriver, ... {
  // The static initializer block is removed to avoid side-effect-based initialization.
  // ...
}

// In java/src/org/openqa/selenium/remote/service/DriverService.java
public abstract static class Builder<...> {
  protected Builder() {
    // Explicitly configure logger when a DriverService is being built.
    Debug.configureLogger();
    // ...
  }
}

// In java/src/org/openqa/selenium/grid/log/LoggingOptions.java
public class LoggingOptions {
  public LoggingOptions(Config config) {
    // Explicitly configure logger when Grid logging is initialized.
    Debug.configureLogger();
    this.config = config;
  }
}

Add a null check for the GECKO_DRIVER_LOG_LEVEL_PROPERTY system property before
passing its value to FirefoxDriverLogLevel.fromString() to prevent a
NullPointerException.

java/src/org/openqa/selenium/firefox/GeckoDriverService.java [237-242]

 if (Debug.isDebugAll()) {
   logLevel = FirefoxDriverLogLevel.DEBUG;
 } else if (logLevel == null) {
-  logLevel =
-      FirefoxDriverLogLevel.fromString(System.getProperty(GECKO_DRIVER_LOG_LEVEL_PROPERTY));
+  String level = System.getProperty(GECKO_DRIVER_LOG_LEVEL_PROPERTY);
+  if (level != null) {
+    logLevel = FirefoxDriverLogLevel.fromString(level);
+  }
 }

• Apply / Chat

Add the synchronized keyword to the configureLogger method signature to prevent
a race condition where multiple threads could add duplicate log handlers.

java/src/org/openqa/selenium/internal/Debug.java [52-71]

-public static void configureLogger() {
+public static synchronized void configureLogger() {
   if (!isDebugAll() || loggerConfigured) {
     return;
   }
 
   Logger logger = Logger.getLogger("org.openqa.selenium");
   logger.setLevel(Level.FINE);
 
   Handler handler =
       new StreamHandler(System.err, new DebugLogFormatter()) {
         @Override
         public synchronized void publish(java.util.logging.LogRecord record) {
           super.publish(record);
           flush();
         }
       };
   handler.setLevel(Level.FINE);
   logger.addHandler(handler);
   loggerConfigured = true;
 }

• Apply / Chat

Call logger.setUseParentHandlers(false) in the configureLogger method to prevent
duplicate log entries from parent logger handlers.

java/src/org/openqa/selenium/internal/Debug.java [57-58]

 Logger logger = Logger.getLogger("org.openqa.selenium");
+logger.setUseParentHandlers(false);
 logger.setLevel(Level.FINE);

• Apply / Chat

Trim and null-check SE_DEBUG before parsing so values like " true " behave as
expected and missing env vars don't rely on implicit parsing behavior.

java/src/org/openqa/selenium/internal/Debug.java [48-50]

 public static boolean isDebugAll() {
-  return Boolean.parseBoolean(System.getenv("SE_DEBUG"));
+  String value = System.getenv("SE_DEBUG");
+  return value != null && Boolean.parseBoolean(value.trim());
 }

• Apply / Chat