Comment 3 for bug 1465922

Revision history for this message
Jeremy Stanley (fungi) wrote :

Well, there's not necessarily a reason to avoid masking sensitive data in debug level logs as a security hardening measure, we just have enough cases of this already in various places along with documentation saying not to disclose debug logs to untrusted parties that we don't issue security advisories when yet another is discovered.