-
Notifications
You must be signed in to change notification settings - Fork 669
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[QA] log lines are silently exposed via crash reporter #8955
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Seen with client 2.9.0-beta3 on win10
while examining e.g. https://sentry.io/organizations/owncloud/issues/2604534440/events/090ac097fd434c719a989cf869e2ce86/?project=79001&statsPeriod=14d#extra
As per #8467 the crash report now contains 20 lines of log file contents.
This may expose server and user names involved, sensitive filenames, or possibly credentials.
The user is not informed that such data is included in the crash report. The user sees an empty text area when approving that the crash report should be sent.
Expected behaviour: The user can opt out or even better manually edit the log contents before sending.
The text was updated successfully, but these errors were encountered: