biff
biff copied to clipboard
Do something about potential PII in stack traces
Right now, various functions in biff.crux (anywhere else?) will throw exceptions that include Crux documents for debugging. That means you might get PII in your prod logs. There should be a flag for enabling this only in dev.
Not sure this will be a concern for a while as Biff is aimed at small projects, but leaving the issue open as an FYI. See the throws in com.biffweb.impl.xtdb/{submit-tx,get-ops}
I don't think this is worth having an open issue for, will reopen if this problem actually comes up for someone.