Comment 34 for bug 1492140
Revision history for this message
| melanie witt (melwitt) wrote Re: consoleauth token displayed in log file | #34 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0e1f616
(Get the code!)
I'm not sure what to think about this one as it's been around for years and we unfortunately have another INFO log exposure [1] of the console auth token that occurred relatively recently [2]:
INFO nova.console.
Path: '?token=
This one, I don't yet know how to suppress because this logging is coming from the underlying websockify third-party code, not nova code.
So, given that the recent fix doesn't get us out of the woods, I'm not sure whether an advisory at this stage would be useful. I'm not opposed to one though.
[1] https:/
[2] https:/