https://github.com/ConsenSys/orchestrate-priv/issues/939

[ggarri]

When a chain registration fails, http basic Auth information is leaked in the logs.

{"@timestamp":"2022-03-31T15:24:49Z","chain_name":"besu_0-X0mac","error":"08000@: Post "http://user1:***@besu2.ops.consensys.net\": dial tcp: lookup besu2.ops.consensys.net on 10.100.0.10:53: no such host","log.level":"error","message":"(use-cases.register-chain): failed to fetch chain id","url":"http://user1:secret@besu2.ops.consensys.net"}

here the value "secret" is hidden in the connexion string but displayed in logs url.