The current implementation logs the value of DATABASE_URL when the PostgreSQL client is initialized. Since the connection string may contain database credentials, logging it can expose sensitive information in application or CI logs.
The existing DATABASE_URL validation and PostgreSQL connection behavior should remain unchanged.
I would like to work on this issue.
The current implementation logs the value of DATABASE_URL when the PostgreSQL client is initialized. Since the connection string may contain database credentials, logging it can expose sensitive information in application or CI logs.
The existing DATABASE_URL validation and PostgreSQL connection behavior should remain unchanged.
I would like to work on this issue.