Do not log payment proof txid, address, message or signature

Author: Ismail-Benali

main.qml

@@ -1068,10 +1068,8 @@ ApplicationWindow {
             var result = currentWallet.getReserveProof(false, currentWallet.currentSubaddressAccount, amount, message)
             txProofComputed(null, result)
         } else {
-            console.log("Getting payment proof: ")
-            console.log("\ttxid: ", txid,
-                        ", address: ", address,
-                        ", message: ", message);
+            // Don't log txid/address/message; payment-proof signatures are
+            // sensitive and must not end up in the logs.
             function spendProofFallback(txid, result){
                 if (!result || result.indexOf("error|") === 0) {
                     currentWallet.getSpendProofAsync(txid, message, txProofComputed);
@@ -1100,11 +1098,8 @@ ApplicationWindow {
 
     // called on "checkProof"
     function handleCheckProof(txid, address, message, signature) {
-        console.log("Checking payment proof: ")
-        console.log("\ttxid: ", txid,
-                    ", address: ", address,
-                    ", message: ", message,
-                    ", signature: ", signature);
+        // Don't log txid/address/message/signature; payment-proof signatures
+        // are sensitive and must not end up in the logs.
 
         var result;
         var isReserveProof = signature.indexOf("ReserveProofV") === 0;