autoscan icon indicating copy to clipboard operation
autoscan copied to clipboard

Sanitize HTTP Basic Auth Credentials in Logs

Open owine opened this issue 2 years ago • 0 comments

This is specifically relating to a scenario where an Autoscan instance is sending scan requests to another Autoscan instance which has password protected triggers. The scan sends successfully by populating the target as https://<user>:<pass>@autoscan.tld but then the username and password are in plaintext in the logs. It would be preferable if these were sanitized, at least for the log file if not for stdout as well.

owine avatar Jan 24 '23 21:01 owine