Fix for password leak in logs

src/util/logger.ts

@@ -9,6 +9,14 @@
     return this._log(message);
   }
 
+  public debug(message: string): void {
+    return this._debug(message);
+  }
+
+  public info(message: string): void {
+    return this._info(message);
+  }
+
   public warn(message: string): void {
     return this._warn(message);
   }
@@ -29,7 +37,30 @@
       return;
     }
 
-    return console.log(`${LIQUIBASE_LABEL} ${message}`);
+    if(this.logLevel == LiquibaseLogLevels.Debug)
+      return this._debug(message);
+
+    return console.log(`${LIQUIBASE_LABEL} ${this.sanitizeOutput(message)}`);
+  }
+
+  private _debug(message: string) {
+    const levels = [LiquibaseLogLevels.Debug, LiquibaseLogLevels.Info, LiquibaseLogLevels.Severe, LiquibaseLogLevels.Warning];
+
+    if (!this.shouldOperate(levels)) {
+      return;
+    }
+
+    return console.debug('\x1b[34m%s\x1b[0m', `${LIQUIBASE_LABEL} ${message}`);
+  }
+
+  private _info(message: string) {
+    const levels = [LiquibaseLogLevels.Info, LiquibaseLogLevels.Severe, LiquibaseLogLevels.Warning];
+
+    if (!this.shouldOperate(levels)) {
+      return;
+    }
+
+    return console.info('\x1b[32m%s\x1b[0m', `${LIQUIBASE_LABEL} ${this.sanitizeOutput(message)}`);
   }
 
   private _warn(message: string) {
@@ -39,7 +70,7 @@
       return;
     }
 
-    return console.warn('\x1b[33m%s\x1b[0m', `${LIQUIBASE_LABEL} ${message}`);
+    return console.warn('\x1b[33m%s\x1b[0m', `${LIQUIBASE_LABEL} ${this.sanitizeOutput(message)}`);
   }
 
   private _error(message: string) {
@@ -49,7 +80,7 @@
       return;
     }
 
-    return console.error('\x1b[31m%s\x1b[0m', `${LIQUIBASE_LABEL} ${message}`);
+    return console.error('\x1b[31m%s\x1b[0m', `${LIQUIBASE_LABEL} ${this.sanitizeOutput(message)}`);
   }
 
   private shouldOperate(acceptableLogLevels: Array<LiquibaseLogLevels>) {
@@ -63,4 +94,9 @@
 
     return this.config?.logLevel || LiquibaseLogLevels.Severe;
   }
+
+  private sanitizeOutput(output: string): string {
+    return output.replace(/password=("?\S+"?)/gi, 'password=******');
+  }
+
 }