graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Set logger level to info in development to prevent credential exposure

Browse source 
SNMPKit library logs complete SNMP messages at debug level, which
includes the community string (credential). Setting log level to :info
prevents these debug messages from appearing in development logs.

Production and test environments already use :info and :warning levels.
This commit is contained in:
Graham McIntire 2026-01-05 14:35:09 -06:00
parent d5905cea73
commit cb9c095847
No known key found for this signature in database
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/dev.exs
View file

@ -3,6 +3,10 @@ import Config
# Do not include metadata nor timestamps in development logs
config :logger, :default_formatter, format: "[$level] $message\n"
# Set minimum log level to info to prevent debug logs from exposing sensitive data
# SNMPKit logs complete SNMP messages at debug level which includes community strings
config :logger, level: :info
# Initialize plugs at runtime for faster development compilation
config :phoenix, :plug_init_mode, :runtime