topic Re: ApiOperationBase logs credit card number to trace log? How to pull request a fix for that? in Integration and Testing

ApiOperationBase logs credit card number to trace log? How to pull request a fix for that?

OnfDev — Wed, 18 May 2016 16:46:18 GMT

In Authorize.Bet.Api.Controllers.Base.ApiOperationBase, the Execute method writes an xml serialized api request object to the trace log. It includes a credit card number. Can I create a pull request to remove that code from your source? It is a fairly big violation of security to store credit cards anywhere and if someone turns tracing on and doesn't know that is in there, credit cards could be logged.

Thanks!

Re: ApiOperationBase logs credit card number to trace log? How to pull request a fix for that?

Lilith — Wed, 18 May 2016 17:28:57 GMT

@OnfDev Yes, please. You should be able to submit the pull request on GitHub.

I'm reporting this discovery to our developers, separately, so they're aware, but the pull request would be very helpful.

Re: ApiOperationBase logs credit card number to trace log? How to pull request a fix for that?

OnfDev — Wed, 18 May 2016 23:11:15 GMT

Thank you! Pull request is in the queue and here is the link: https://github.com/AuthorizeNet/sdk-dotnet/pull/146