Skip to content

Commit d10f069

Browse files
nywilkenmickael-hc
andauthored
docs: provide logging recommendations (#371) (#372)
Co-authored-by: mickael-hc <[email protected]>
1 parent 106ef8d commit d10f069

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,10 @@ go-getter contains mitigations for some of these security issues, but should sti
5757
caution in security-critical contexts. See the available [security options](#Security-Options) that
5858
can be configured to mitigate some of these risks.
5959

60+
go-getter may return values that contain caller-provided query parameters that can contain sensitive data.
61+
Context around what parameters are and are not sensitive is known only by the caller of go-getter, and specific to each use case.
62+
We recommend the caller ensure that go-getter's return values (e.g., error messages) are properly handled and sanitized to ensure
63+
sensitive data is not persisted to logs.
6064
## URL Format
6165

6266
go-getter uses a single string URL as input to download from a variety of

0 commit comments

Comments
 (0)