Search before asking
Linkis Component
Description
Currently, Linkis engine logs may expose sensitive information including:
- User authentication tokens
- User execution code
- Missing engine instance identification during kill operations
This poses security risks and makes debugging difficult.
Steps to reproduce
- Execute tasks with authentication tokens
- Check engine logs
- Observe tokens and user code are printed in plain text
- Kill an engine instance and check logs - missing instance info
Expected behavior
- User tokens should be filtered/masked in all log outputs
- User code should not be printed in engine logs
- Kill engine operations should log engine instance information
Your environment
- Linkis version used: 2.0.0
- Environment name and version:
- hadoop-3.3.4
- hive-2.3.3
- spark-3.3.0
- scala-2.12.17
- jdk 1.8.0_xxx
Anything else
This PR introduces utility classes CodeUtils and TokenSensitiveUtils to filter sensitive information across all engine plugins and services.
Are you willing to submit a PR?
Search before asking
Linkis Component
Description
Currently, Linkis engine logs may expose sensitive information including:
This poses security risks and makes debugging difficult.
Steps to reproduce
Expected behavior
Your environment
Anything else
This PR introduces utility classes CodeUtils and TokenSensitiveUtils to filter sensitive information across all engine plugins and services.
Are you willing to submit a PR?