Redact secrets from startup error logs #4

Merged
magnus merged 1 commits from fix/redact-startup-errors into main 2026-09-18 15:10:34 +00:00
2 changed files with 7 additions and 3 deletions
+6 -3
View File
@@ -19,9 +19,12 @@
;; log uncaught exceptions in threads ;; log uncaught exceptions in threads
(Thread/setDefaultUncaughtExceptionHandler (Thread/setDefaultUncaughtExceptionHandler
(fn [thread ex] (fn [thread ex]
(log/error {:what :uncaught-exception ;; Integrant exceptions include component configuration in ex-data. Logging
:exception ex ;; the exception object can therefore disclose database or cookie secrets.
:where (str "Uncaught exception on" (.getName thread))}))) (log/error {:what :uncaught-exception
:exception-class (.getName (class ex))
:message (.getMessage ex)
:where (str "Uncaught exception on " (.getName thread))})))
(defonce system (atom nil)) (defonce system (atom nil))
+1
View File
@@ -3,5 +3,6 @@
[clojure.test :refer [deftest is]] [clojure.test :refer [deftest is]]
[pmagnus.elprice.core :as core])) [pmagnus.elprice.core :as core]))
(deftest system-state-is-managed-in-an-atom (deftest system-state-is-managed-in-an-atom
(is (instance? clojure.lang.Atom core/system))) (is (instance? clojure.lang.Atom core/system)))