When restoring a wallet from seed the private passphrase is written in plain text to the decrediton log file. This occurs both in RPC and SPV mode. withLogNoArgs and withLogNoData funcs already exist for the purpose of ensuring secrets are not written to logs, so they can likely be reused for this case.
|
export const spvSync = log( |
|
export const rpcSync = log( |
When restoring a wallet from seed the private passphrase is written in plain text to the decrediton log file. This occurs both in RPC and SPV mode.
withLogNoArgsandwithLogNoDatafuncs already exist for the purpose of ensuring secrets are not written to logs, so they can likely be reused for this case.decrediton/app/wallet/loader.js
Line 165 in bd6cdd7
decrediton/app/wallet/loader.js
Line 181 in bd6cdd7