Tech
The Python exception that leaked tenant secrets
I was lying in my four-year-old's bed at 8:30 PM (long story, Spider-Man was involved) when a Slack message came in:
yoo, we're logging all tenant config secrets in plain text in prod
Not dev. Not staging. Production. Tenant config. Plain text.
The line that surfaced it was raise e . But switching that to bare raise would not have prevented the incident. The secret was already baked into the exception message string before the raise happened. raise e was the symptom. The actual...
Read the full discussion on Dev.to
This article was aggregated from Dev.to. Click to join the conversation.
View on Dev.to