fix(security): do not print ENV config values when they are passwords, fixes #3337

pkg/setting/setting.go

@@ -174,6 +174,9 @@ func applyEnvVariableOverrides() {
 
 
 			if len(envValue) > 0 {
 			if len(envValue) > 0 {
 				key.SetValue(envValue)
 				key.SetValue(envValue)
+				if strings.Contains(envKey, "PASSWORD") {
+					envValue = "*********"
+				}
 				appliedEnvOverrides = append(appliedEnvOverrides, fmt.Sprintf("%s=%s", envKey, envValue))
 				appliedEnvOverrides = append(appliedEnvOverrides, fmt.Sprintf("%s=%s", envKey, envValue))
 			}
 			}
 		}
 		}
@@ -188,6 +191,9 @@ func applyCommandLineDefaultProperties(props map[string]string) {
 			value, exists := props[keyString]
 			value, exists := props[keyString]
 			if exists {
 			if exists {
 				key.SetValue(value)
 				key.SetValue(value)
+				if strings.Contains(keyString, "password") {
+					value = "*********"
+				}
 				appliedCommandLineProperties = append(appliedCommandLineProperties, fmt.Sprintf("%s=%s", keyString, value))
 				appliedCommandLineProperties = append(appliedCommandLineProperties, fmt.Sprintf("%s=%s", keyString, value))
 			}
 			}
 		}
 		}