Redact secrets from startup error logs
pull-request / validate (pull_request) Successful in 1m27s

This commit is contained in:
2026-09-18 17:08:57 +02:00
parent 7e8b946ab4
commit d2fc39422a
2 changed files with 7 additions and 3 deletions
+5 -2
View File
@@ -19,9 +19,12 @@
;; log uncaught exceptions in threads ;; log uncaught exceptions in threads
(Thread/setDefaultUncaughtExceptionHandler (Thread/setDefaultUncaughtExceptionHandler
(fn [thread ex] (fn [thread ex]
;; Integrant exceptions include component configuration in ex-data. Logging
;; the exception object can therefore disclose database or cookie secrets.
(log/error {:what :uncaught-exception (log/error {:what :uncaught-exception
:exception ex :exception-class (.getName (class ex))
:where (str "Uncaught exception on" (.getName thread))}))) :message (.getMessage ex)
:where (str "Uncaught exception on " (.getName thread))})))
(defonce system (atom nil)) (defonce system (atom nil))
+1
View File
@@ -3,5 +3,6 @@
[clojure.test :refer [deftest is]] [clojure.test :refer [deftest is]]
[pmagnus.elprice.core :as core])) [pmagnus.elprice.core :as core]))
(deftest system-state-is-managed-in-an-atom (deftest system-state-is-managed-in-an-atom
(is (instance? clojure.lang.Atom core/system))) (is (instance? clojure.lang.Atom core/system)))