-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Description
Feature Request
Is your feature request related to a problem? Please describe:
Sensitive data can be written to the error log in many cases. This is problematic for environments where strict controls must be placed on sensitive, identifying, or financial data.
Describe the feature you'd like:
We should ensure that sensitive data is not written to error and other informational logs. These are different from logs that are explicitly enabled by the user (the general query log, slow query log, etc.), for which desensitization procedures would be different.
To resolve this issue will require an extensive audit of how we write log entries. There are many cases where the contents of SQL statements are written to the log (permission failures, syntax errors, etc.), and all of those need to be dealt with to resolve this task.
Describe alternatives you've considered:
Teachability, Documentation, Adoption, Migration Strategy: