Skip to content

Avoid exposing configuration values in errors - #8669

Open
abdessattar23 wants to merge 1 commit into
open-telemetry:mainfrom
abdessattar23:fix/config-secret-leak
Open

Avoid exposing configuration values in errors#8669
abdessattar23 wants to merge 1 commit into
open-telemetry:mainfrom
abdessattar23:fix/config-secret-leak

Conversation

@abdessattar23

Copy link
Copy Markdown
Contributor

Malformed map properties and URL-encoded OTLP headers included their raw values in configuration exceptions. These values can contain credentials that subsequently appear in startup logs.

This preserves the property or header name while omitting its value. Regression tests use sentinel credentials to verify the messages remain redacted.

@abdessattar23
abdessattar23 requested a review from a team as a code owner July 28, 2026 23:22
@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Jul 28, 2026

Copy link
Copy Markdown

Pull request dashboard status

Waiting on reviewers · refreshed 2026-07-29 01:36 UTC

Review the latest changes.

Status above doesn't look right?
  • Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
  • Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

@codecov

codecov Bot commented Jul 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.47%. Comparing base (6ffe557) to head (a057909).

Additional details and impacted files
@@             Coverage Diff              @@
##               main    #8669      +/-   ##
============================================
- Coverage     91.47%   91.47%   -0.01%     
  Complexity    10457    10457              
============================================
  Files          1021     1021              
  Lines         27650    27649       -1     
  Branches       3242     3242              
============================================
- Hits          25293    25292       -1     
  Misses         1615     1615              
  Partials        742      742              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant