Protect sensitive information

[ylavoie]

The configuration url can display sensible information on error. Protect or filter out.

[camertron]

Hey @ylavoie, I think you mean sensitive information. The configuration URL is meant to be passed in as an environment variable, and in the raw case is really only meant for docker containers. Txgh reads this config on initialization, so none of the information can be filtered out. Can you expand a bit on your thoughts here?

[ylavoie]

Yes I meaned sensitive information; sorry french word use in an English phrase. I had an error and all the variables were shown on the end user screen because the package is published by default in development mode.

[camertron]

Ah ok interesting. Were you using the raw:// config scheme? I'm still not sure I understand how the config was leaked to the end user.

[ylavoie]

The Dockerfile is set for development instead of production