Logging plugin passwords during startup

Question

Hi there,

I am developing a Jira plugin.

On Jira startup [c.a.jira.startup.JiraStartupLogger] logs some information among which there is a section

___ Application Properties ________________

...

There can be found data from my plugin settings page, e.g. key:value pairs. Some of the values are passwords which I would not want to be logged.

Is there a way to avoid logging such security/vulnerable information?

I also consider encryption as a way to go. Would this be easier?

Thanks so much in advance!

Regards, Yevhen

Dave LIAO · Accepted Answer

@yevhen_rudenko - hi Yevhen! Encrypting sensitive info (instead of having it in cleartext) sounds like a way to go.

Figure out how to solve this? If not, consider posting on the Atlassian Developer Community if you haven't yet.