fix(security): disable verbose Ktor HTTP logging across KMP clients#3141
fix(security): disable verbose Ktor HTTP logging across KMP clients#3141Divyateja2709 wants to merge 7 commits into
Conversation
… request/response payloads
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (69)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
This PR hardens network logging behavior by disabling verbose Ktor HTTP logs across all platform-specific
HttpClientimplementations.Changes
Updated the following files:
core/network/src/androidMain/kotlin/org/mifos/mobile/core/network/KtorHttpClient.android.ktcore/network/src/desktopMain/kotlin/org/mifos/mobile/core/network/KtorHttpClient.desktop.ktcore/network/src/nativeMain/kotlin/org/mifos/mobile/core/network/KtorHttpClient.native.ktcore/network/src/jsMain/kotlin/org/mifos/mobile/core/network/KtorHttpClient.js.ktcore/network/src/wasmJsMain/kotlin/org/mifos/mobile/core/network/KtorHttpClient.wasmJs.ktIn each file:
Logginglevel fromLogLevel.ALLtoLogLevel.NONEWhy
LogLevel.ALLmay expose sensitive request/response details (including auth-related data) through logs.Disabling verbose logging reduces data exposure risk and aligns with the security remediation goals from the Cipher initiative.
Scope
Validation