apache/dolphinscheduler

[Improvement] [log] If the password is passed as a parameter in the task log, the password will still be in clear text

Opened this issue · 1 comments

Search before asking

  • I had searched in the issues and found no similar issues.

What happened

发现如果用参数传递密码的话,在节点的work-log 密码还是会明文显示,希望是密文,该怎么解决呢
image

What you expected to happen

SensitiveDataConverter.java 上处理敏感密码日志没有处理到,正则表达式没有覆盖到。

How to reproduce

使用sql组件来查下表里存储到密码,参数往下传递。

Anything else

No response

Version

3.1.x

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Search before asking

  • I had searched in the issues and found no similar issues.

What happened

I found that if I use parameters to pass the password, the password will still be displayed in plain text in the work-log of the node. I hope it is cipher text. How to solve this problem?
image

What you expected to happen

The processing of sensitive password logs in SensitiveDataConverter.java is not processed, and the regular expression is not covered.

How to reproduce

Use the sql component to check the password stored in the table, and pass the parameters downward.

Anything else

No response

Version

3.1.x

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct