Open
Description
Looking at logs of my service I've noticed bot token is getting written to the log files. Which is not quite secure.
Example of the log:
level=error msg="Failed to get updates, retrying in 3 seconds ..." err="cannot get events: error while making request: cannot make request to bot api: Get \"https://api.internal.myteam.mail.ru/bot/v1//events/get?lastEventId=86&pollTime=60&token=123.123123123.123123%3A123123123\": context canceled" retry interval="3 seconds"
The token is a URL parameter, and the URL gets logged here:
Line 75 in 4d4de6b
Metadata
Metadata
Assignees
Labels
No labels