Obfuscate DSN password when logging connection details, fixes #174 (#176

)
usefathom · Oct 30, 2018 · acd1826 · acd1826
1 parent 02c2eb9
commit acd1826
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/pkg/datastore/sqlstore/sqlstore.go b/pkg/datastore/sqlstore/sqlstore.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"database/sql"
 	"errors"
+	"regexp"
 	"time"
 
 	_ "github.com/go-sql-driver/mysql" // mysql driver
@@ -39,8 +40,9 @@ func New(c *Config) *sqlstore {
 	}
 	db := &sqlstore{dbx, c.Driver, c}
 
-	// write log statement
-	log.Printf("Connected to %s database: %s", c.Driver, c.DSN())
+	// write log statement, sanitize password
+	re := regexp.MustCompile(`password=[^ ]+`)
+	log.Printf("Connected to %s database: %s", c.Driver, re.ReplaceAllString(c.DSN(), `xxxxx`))
 
 	// run migrations
 	db.Migrate()