Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix: remove stream url from info logs
This solves the most prominent credential leak. With every new connection the passwords were leaked to the logs visible in the UI as well. With this change only the stream name gets logged here. There are other places in the codebase where we still log secret embedded in URLs, but a lot of them lack access to the stream name they could be replaced with. Most of these occurances are debug logs, but some are warning level though. I can try to come up with a fix in a followup PR. This change is a simpler alternative to AlexxIT#1219 to address the issue to rid of the password in the log line emitted whenever a stream is created: [streams] create new stream url=rtsp://stream:xxxxxxxxxx@192.168.42.42:554/stream1 [streams] create new stream garage-cam
- Loading branch information