Problem/Motivation

Scanning by Claude Opus 4.8 identifies some places where the payload still gets logged:

  1. Unvalidated payload embedded in exception messages — contradicts the logging policy (Medium)

  The module goes to real lengths to avoid persisting sensitive payload data: throwInvalidJsonException() and logCorrections() only log
  the full payload when debug_log_full_payload is explicitly enabled, with docblocks noting fields "stored encrypted" must not hit
  logs in plaintext.

  But several exceptions embed the entire raw payload directly in their message:

  - JsonSchemaValidator.php:125 and :133 — "Failed to decode encoded JSON! $encoded_json"
  - JsonSchemaValidator.php:217 and :261 — "Failed to decode encoded JSON! $raw"
  - YamlJsonSchemaValidator.php:39 — interpolates $file_path (low sensitivity, but same pattern)

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

ptmkenny created an issue. See original summary.

  • ptmkenny committed c38bfbab on 1.0.x
    fix: #3605387 Ensure full payloads are not logged unless requested
    
    By:...
ptmkenny’s picture

Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.