cancel
Showing results forย 
Search instead forย 
Did you mean:ย 

ApiOperationBase logs credit card number to trace log? How to pull request a fix for that?

In Authorize.Bet.Api.Controllers.Base.ApiOperationBase, the Execute method writes an xml serialized api request object to the trace log. It includes a credit card number. Can I create a pull request to remove that code from your source? It is a fairly big violation of security to store credit cards anywhere and if someone turns tracing on and doesn't know that is in there, credit cards could be logged.

Thanks!

OnfDev
Member
2 REPLIES 2

@OnfDev Yes, please. You should be able to submit the pull request on GitHub.

I'm reporting this discovery to our developers, separately, so they're aware, but the pull request would be very helpful.

--
"Move fast and break things," out. "Move carefully and fix what you break," in.
Lilith
Administrator Administrator
Administrator

Thank you!  Pull request is in the queue and here is the link:  https://github.com/AuthorizeNet/sdk-dotnet/pull/146