security(email): VPR-34 - Remove PII from email logs - #70
Conversation
rlorenzo
commented
Nov 19, 2025
rlorenzo
commented
- Remove email addresses from all EmailService log output
- Remove email addresses from all EmailService log output
There was a problem hiding this comment.
Pull Request Overview
This PR removes personally identifiable information (PII) from email service logs by eliminating email addresses from all log statements in the EmailService class, addressing security ticket VPR-34.
Key Changes:
- Removed recipient email addresses from all log output in
SendEmailAsyncmethod - Retained subject line and SMTP configuration details for debugging purposes
- Applied changes consistently across information, error, and warning log levels
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
- Remove email subjects from logs (potential sensitive data exposure) - Add Area/Controller context to identify email trigger source - Log recipient count instead of addresses for debugging - Support background email tasks with "Background" context label
There was a problem hiding this comment.
Pull Request Overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull Request Overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
