Type safe secure logging
Aspects of the disclosure relate to providing type safe secure logging. A computing platform may receive application code comprising one or more calls to one or more logging methods. Subsequently, the computing platform may compile the application code comprising the one or more calls to the one or more logging methods to produce a compiled software application. During the compiling of the application code comprising the one or more calls to the one or more logging methods, the computing platform may enforce one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods. Thereafter, the computing platform may store the compiled software application. In some embodiments, enforcing the one or more type-based secure logging rules may include allowing logging of one or more predetermined classes of objects.
1. A method, comprising:
at a computing platform comprising at least one processor, memory, and a communication interface:
receiving, by the at least one processor, application code comprising one or more calls to one or more logging methods;
compiling, by the at least one processor, the application code comprising the one or more calls to the one or more logging methods to produce a compiled software application;
during the compiling of the application code comprising the one or more calls to the one or more logging methods, enforcing, by the at least one processor, one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods; and
storing, by the at least one processor, the compiled software application.
2. The method of claim 1 , comprising:
prior to receiving the application code comprising the one or more calls to the one or more logging methods:
receiving, by the at least one processor, one or more type-safe logging rules;
generating, by the at least one processor, a type-safe secure logging library based on the one or more type-safe logging rules; and
storing, by the at least one processor, the type-safe secure logging library.
3. The method of claim 2 , wherein generating the type-safe secure logging library based on the one or more type-safe logging rules comprises defining one or more classes of objects as being safe for logging.
4. The method of claim 2 , wherein generating the type-safe secure logging library based on the one or more type-safe logging rules comprises defining one or more interfaces for asserting that one or more specific objects are safe for logging.
5. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive application code comprising one or more calls to one or more logging methods;
compile the application code comprising the one or more calls to the one or more logging methods to produce a compiled software application;
during the compiling of the application code comprising the one or more calls to the one or more logging methods, enforce one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods; and
store the compiled software application.
6. The computing platform of claim 5 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
prior to receiving the application code comprising the one or more calls to the one or more logging methods:
receive one or more type-safe logging rules;
generate a type-safe secure logging library based on the one or more type-safe logging rules; and
store the type-safe secure logging library.
7. The computing platform of claim 6 , wherein generating the type-safe secure logging library based on the one or more type-safe logging rules comprises defining one or more classes of objects as being safe for logging.
8. The computing platform of claim 6 , wherein generating the type-safe secure logging library based on the one or more type-safe logging rules comprises defining one or more interfaces for asserting that one or more specific objects are safe for logging.
9. The computing platform of claim 6 , wherein generating the type-safe secure logging library based on the one or more type-safe logging rules comprises defining one or more logging methods that only accept one or more safe types of objects for logging data with one or more logging systems.
10. The computing platform of claim 9 , wherein the one or more logging methods defined in the type-safe secure logging library cause the compiled software application to log data with at least one specific logging system when the compiled software application is executed.
11. The computing platform of claim 5 , wherein receiving the application code comprising the one or more calls to the one or more logging methods comprises receiving, via the communication interface, the application code comprising the one or more calls to the one or more logging methods from a first developer computing device.
12. The computing platform of claim 11 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
prior to compiling of the application code comprising the one or more calls to the one or more logging methods, send, via the communication interface, to a second developer computing device, a code review notification.
13. The computing platform of claim 12 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
after sending the code review notification to the second developer computing device:
receive, via the communication interface, from the second developer computing device, a code review request;
responsive to receiving the code review request, send, via the communication interface, to the second developer computing device, the application code comprising the one or more calls to the one or more logging methods;
receive, via the communication interface, from the second developer computing device, code review results information; and
responsive to receiving the code review results information, send, via the communication interface, to the first developer computing device, a code review status notification.
14. The computing platform of claim 13 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
prior to compiling of the application code comprising the one or more calls to the one or more logging methods, receive, via the communication interface, from the first developer computing device, a request to compile the application code comprising the one or more calls to the one or more logging methods.
15. The computing platform of claim 5 , wherein enforcing the one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods comprises allowing logging of one or more predetermined classes of objects.
16. The computing platform of claim 5 , wherein enforcing the one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods comprises:
detecting an attempt to log at least one unsafe type of object; and
in response to detecting the attempt to log the at least one unsafe type of object, generating an error message.
17. The computing platform of claim 5 , wherein enforcing the one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods comprises allowing logging of one or more potentially unsafe types of objects based on the one or more potentially unsafe types of objects being wrapped in a safe-logging wrapper.
18. The computing platform of claim 5 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
send, via the communication interface, to a first developer computing device, the compiled software application.
19. The computing platform of claim 5 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
push, via the communication interface, to one or more production servers, the compiled software application.
20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:
receive application code comprising one or more calls to one or more logging methods;
compile the application code comprising the one or more calls to the one or more logging methods to produce a compiled software application;
during the compiling of the application code comprising the one or more calls to the one or more logging methods, enforce one or more type-based secure logging rules on the application code comprising the one or more calls to the one or more logging methods; and
store the compiled software application.