{"action":"closed","issue":{"url":"https://api.github.com/repos/HangfireIO/Hangfire/issues/474","labels_url":"https://api.github.com/repos/HangfireIO/Hangfire/issues/474/labels{/name}","comments_url":"https://api.github.com/repos/HangfireIO/Hangfire/issues/474/comments","events_url":"https://api.github.com/repos/HangfireIO/Hangfire/issues/474/events","html_url":"https://github.com/HangfireIO/Hangfire/issues/474","id":115285743,"number":474,"title":"Redis password is logged on startup and exposed in dashboard","user":{"login":"odinserj","id":1078718,"avatar_url":"https://avatars.githubusercontent.com/u/1078718?v=3","gravatar_id":"","url":"https://api.github.com/users/odinserj","html_url":"https://github.com/odinserj","followers_url":"https://api.github.com/users/odinserj/followers","following_url":"https://api.github.com/users/odinserj/following{/other_user}","gists_url":"https://api.github.com/users/odinserj/gists{/gist_id}","starred_url":"https://api.github.com/users/odinserj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/odinserj/subscriptions","organizations_url":"https://api.github.com/users/odinserj/orgs","repos_url":"https://api.github.com/users/odinserj/repos","events_url":"https://api.github.com/users/odinserj/events{/privacy}","received_events_url":"https://api.github.com/users/odinserj/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/HangfireIO/Hangfire/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/HangfireIO/Hangfire/labels/security","name":"security","color":"006b75"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/HangfireIO/Hangfire/milestones/37","html_url":"https://github.com/HangfireIO/Hangfire/milestones/Pro%201.4.2","labels_url":"https://api.github.com/repos/HangfireIO/Hangfire/milestones/37/labels","id":1395598,"number":37,"title":"Pro 1.4.2","description":"","creator":{"login":"odinserj","id":1078718,"avatar_url":"https://avatars.githubusercontent.com/u/1078718?v=3","gravatar_id":"","url":"https://api.github.com/users/odinserj","html_url":"https://github.com/odinserj","followers_url":"https://api.github.com/users/odinserj/followers","following_url":"https://api.github.com/users/odinserj/following{/other_user}","gists_url":"https://api.github.com/users/odinserj/gists{/gist_id}","starred_url":"https://api.github.com/users/odinserj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/odinserj/subscriptions","organizations_url":"https://api.github.com/users/odinserj/orgs","repos_url":"https://api.github.com/users/odinserj/repos","events_url":"https://api.github.com/users/odinserj/events{/privacy}","received_events_url":"https://api.github.com/users/odinserj/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":1,"state":"open","created_at":"2015-11-05T13:37:15Z","updated_at":"2015-11-05T14:03:06Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-11-05T13:41:53Z","updated_at":"2015-11-05T14:03:06Z","closed_at":"2015-11-05T14:03:06Z","body":"Posted on forum: [Redis Connection string is logged with the password](https://discuss.hangfire.io/t/redis-connection-string-is-logged-with-the-password/1507)\r\n\r\n> When starting up, the server logs the following text:\r\n> 11-04-2015 14:06:30 INFO Using job storage: 'redis://myPassword@myRedisServer/0'.\r\n>\r\n> The password that is used to connect to the redis server should not be logged. Recommend masking the password, otherwise, allow disabling logging the connection string.\r\n> \r\n> Exposing the password in a log file is oftentimes considered a security risk.\r\n\r\nPassword is also exposed in dashboard, as it uses the `RedisStorage.ToString` method also. The password should be stripped in this method."}}