wrangler-action icon indicating copy to clipboard operation
wrangler-action copied to clipboard

Lack of `accountId` leaks account names and IDs in the logs

Open arunsathiya opened this issue 1 year ago • 1 comments

When I don't supply the accountId param, the wrangler action logs contain the list of all account names and account IDs, along with a More than one account available but unable to select on message.

I am not sure if account IDs are considered sensitive information by Cloudflare, by if they are, there's value in masking them in the logs.

arunsathiya avatar Sep 02 '24 03:09 arunsathiya

Should I file this on the Workers SDK tracker instead?

arunsathiya avatar Sep 02 '24 03:09 arunsathiya

Cloudflare doesn't consider the account ID sensitive

shahsimpson avatar Nov 12 '24 17:11 shahsimpson