From 4c170ed56460028f5c02d16a5576250312eecf89 Mon Sep 17 00:00:00 2001
From: Joe Adams <github@joeadams.io>
Date: Sat, 15 Feb 2025 10:35:04 -0500
Subject: [PATCH] Fix missing dsn sanitization for logging (#1104)
This log line was not sanitized previously which could result in logging sensitive information. I have scanned the rest of the files and I don't see anywhere else that DSN is used in a log line without this filter.
Resolves #1042
Signed-off-by: Joe Adams <github@joeadams.io>
---
cmd/postgres_exporter/postgres_exporter.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/cmd/postgres_exporter/postgres_exporter.go b/cmd/postgres_exporter/postgres_exporter.go
index d76e2bae..a7647961 100644
--- a/cmd/postgres_exporter/postgres_exporter.go
+++ b/cmd/postgres_exporter/postgres_exporter.go
@@ -681,7 +681,7 @@ func (e *Exporter) scrape(ch chan<- prometheus.Metric) {
if err := e.scrapeDSN(ch, dsn); err != nil {
errorsCount++
- logger.Error("error scraping dsn", "err", err, "dsn", dsn)
+ logger.Error("error scraping dsn", "err", err, "dsn", loggableDSN(dsn))
if _, ok := err.(*ErrorConnectToServer); ok {
connectionErrorsCount++