misc changes #4
misc changes #4
Conversation
yann300
commented
Oct 3, 2025
yann300
commented
- use axios.
- add more events.
- some misc code changes
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| } | ||
|
|
||
| const startDate = new Date(2025, 0, 1) | ||
| console.log('API KEY', process.env.MATOMO_API_KEY) |
Check failure
Code scanning / CodeQL
Clear-text logging of sensitive information High
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 2 months ago
To fix this, we need to prevent logging the actual value of the sensitive environment variable. The best approach is to either remove the logging statement entirely or, if some logging is needed for debugging purposes, log only the fact that the variable is set or mask its value (e.g., show only the last 4 digits or asterisks). For maximum safety and to avoid future accidental logging, the direct use of process.env.MATOMO_API_KEY in logs should be removed or masked. Change only line 97, replacing the sensitive value with either nothing, a masked value, or a generic message.
| @@ -94,7 +94,7 @@ | ||
| console.log('it', it) | ||
| } | ||
|
|
||
| console.log('API KEY', process.env.MATOMO_API_KEY) | ||
| // console.log('API KEY', process.env.MATOMO_API_KEY) // REMOVED: avoid logging sensitive API key | ||
| const startDate = new Date(2025, 8, 22) | ||
| console.log(startDate) | ||
| const endDate = new Date() |
