Don't display detailed errors from credentials file (#4004)

dart-lang · Aug 31, 2023 · edcd5c2 · edcd5c2
1 parent bddb0b8
commit edcd5c2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/src/oauth2.dart b/lib/src/oauth2.dart
@@ -184,7 +184,9 @@ Credentials? loadCredentials() {
 
     return credentials;
   } catch (e) {
-    log.error('Warning: could not load the saved OAuth2 credentials: $e\n'
+    // Don't print the error message itself here. I might be leaking data about
+    // credentials.
+    log.error('Warning: could not load the saved OAuth2 credentials.\n'
         'Obtaining new credentials...');
     return null; // null means re-authorize.
   }