From 84bc4f6cddfcb5fedc7586644d66d025476255ad Mon Sep 17 00:00:00 2001 From: Tim Graham Date: Mon, 13 Jul 2015 18:11:24 -0400 Subject: [PATCH] Fixed #25121 -- Added a warning that filtering sensitive information from error reporting isn't bulletproof --- docs/howto/error-reporting.txt | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/howto/error-reporting.txt b/docs/howto/error-reporting.txt index afa6da0ff6..da7d487cdc 100644 --- a/docs/howto/error-reporting.txt +++ b/docs/howto/error-reporting.txt @@ -114,6 +114,14 @@ and override its methods. Filtering error reports ----------------------- +.. warning:: + + Filtering sensitive data is a hard problem, and it's nearly impossible to + guarantee that sensitive won't leak into an error report. Therefore, error + reports should only be available to trusted team members and you should + avoid transmitting error reports unencrypted over the Internet (such as + through email). + Filtering sensitive information ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~