Logging plugin passwords during startup

[yevhen_rudenko]

Hi there,

I am developing a Jira plugin. 

On Jira startup [c.a.jira.startup.JiraStartupLogger] logs some information among which there is a section

___ Application Properties ________________

...

...

There can be found data from my plugin settings page, e.g. key:value pairs. Some of the values are passwords which I would not want to be logged.

Is there a way to avoid logging such security/vulnerable information?

I also consider encryption as a way to go. Would this be easier?

Thanks so much in advance!

Regards, Yevhen

[Dave Liao · Accepted solution]

@yevhen_rudenko - hi Yevhen! Encrypting sensitive info (instead of having it in cleartext) sounds like a way to go.

Figure out how to solve this? If not, consider posting on the Atlassian Developer Community if you haven't yet.