Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dumping objects with sensitive data #48

Open
thomasgalliker opened this issue Dec 19, 2019 · 2 comments
Open

Dumping objects with sensitive data #48

thomasgalliker opened this issue Dec 19, 2019 · 2 comments
Assignees

Comments

@thomasgalliker
Copy link
Owner

We often have the situation that dumped objects contain sensitive data such a personal information (name, address,...) or security relevant information (password hashes, authentication tokens). ObjectDumper of course cannot automatically detect and obfuscate such information.

This issues serves as bucket to collect ideas of the users of ObjectDumper would like this problem to be solved - or if it even is a problem to be solved.

@selmaohneh
Copy link

How about an ignore attribute similar to how json is ignoring properties?
Something like [IgnoreWhenDumping] or [DontDump] is easy to implement, easy to use, and even easy to read.

@thomasgalliker
Copy link
Owner Author

The thing with attributes is: we should avoid having people to install ObjectDumper nuget in all their contracts/model assemblies. Theoretically, we could probe for the presence of a certrain attribute name (like you proposed, „IgnoreWhenDumping" or similar).

What actually is already present is an ExcludeProperties filter in DumpOptions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants