You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Safe logging of attributes through limiting their length #3301
Is your feature request related to a problem? Please describe.
A lot of the values of the log attributes are coming from inbound requests (e.g. trace-id, username, ...), and there is some risk of log pollution "attacks" by hammering in requests with very long values for those.
They typically end up clogging up disk space, but also log collectors/aggregators and search engines such as Graylog.
Thus, for values that come from requests instead of constants or configuration settings, it might be advisable to limit their length.
Describe the solution you'd like
Use wrappers for string values and string array values in logging calls to limit their maximum lengths, to avoid log pollution.
Activity