[common] Redact sensitive configuration values in logs and exceptions#8721

Open

XiaoHongbo-Hope wants to merge 13 commits into

apache:masterfrom

XiaoHongbo-Hope:log_prinnt_fix

Commits on Jul 19, 2026

[api] Redact sensitive config values in logs and REST exceptions

XiaoHongbo-Hope
and
claude
committed
[common][flink] Redact sensitive config values in Hadoop and Flink logs

XiaoHongbo-Hope
and
claude
committed
[common] Mask instead of drop the value in Hadoop config debug log
XiaoHongbo-Hope
committed
[api] Harden secret redaction in REST error handling and logs
XiaoHongbo-Hope
committed
[api] Fully mask secrets (AWS-aligned), harden redactText, cover more log/URI leaks
XiaoHongbo-Hope
committed
[api] Harden URI sanitization and redactText separators; fix error label
XiaoHongbo-Hope
committed
[api] Fail closed on unparseable URIs and stop leaking them via exceptions
XiaoHongbo-Hope
committed
[common] Do not leak the raw URI when UriReaderFactory cannot parse it
XiaoHongbo-Hope
committed
Sanitize HTTP execute-stage exceptions and unify invalid-URI classification
XiaoHongbo-Hope
committed
Update FlinkRowWrapperTest for sanitized invalid-URI message
XiaoHongbo-Hope
committed
Sanitize HTTP request construction so a malformed URL never leaks the raw URL
XiaoHongbo-Hope
committed
Do not leak ECS token credentials on malformed JSON
XiaoHongbo-Hope
committed
Do not leak local-file token credentials on malformed JSON
XiaoHongbo-Hope
committed