The problem
Malformed map properties and URL-encoded OTLP headers could include raw values in configuration exceptions. Those values can contain credentials and appear in startup logs.
The change
Error messages retain the property or header name and omit the corresponding raw value.
What the tests establish
Regression tests use sentinel credential values and assert the expected redacted exception messages.
Scope matters
The fix covers the identified configuration error paths. It is not a claim that every possible logging path is secret-free.
Inspect the evidence
The public pull request contains the implementation, regression tests, review discussion, and merge status.
Open the merged contribution ↗