Blank out passwords from commands in the logs. 🔼

OpenSim used to do this.


reported=2019-09-09 02:17:47

reporter=onefang

priority=urgent

category=Bug

severity=text

resolution=fixed


2021-08-26 17:08:23 onefang: It never blanked out passwords in save iar commands that are stuffed into history.

Though OpenSim/Framework/Console/LocalConsole.cs has this -

[code=C#]

// If we're not echoing to screen (e.g. a password) then we probably don't want it in history

[/code]

So "save iar" is the command needed to be blanked out.  "create user" and "reset user password" can both have the password left out, which will then prompt for them, which should trigger the above "not echoing to screen".

I'm not seeing anything in logs, but I might be missing them.


2021-08-26 17:11:13 onefang: Just making the logs unreadable by group and others should suffice for now.