Ecto.Repo.Supervisor.start_child leaks credentials

[Schultzer]

Elixir version

1.19.5

Database and Version

PostgreSQL 16.4

Ecto Versions

3.13.5

Database Adapter and Versions (postgrex, myxql, etc)

postgrex 0.22.0

Current behavior

Ecto.Repo.Supervisor.start_child leaks credentials.

Expected behavior

I believe it would be important to always wrap configuration in a structure like what was done for elixir-ecto/db_connection#340.

[josevalim]

@Schultzer can you please provide steps to reproduce the issue?

[Schultzer]

@Schultzer can you please provide steps to reproduce the issue?

Sorry, I forgot to mention that these appears in the ["otp","sasl"] domain as info logs.

This happens at startup/migration if you have enabled handle_otp_reports and handle_sasl_reports

It's also true for DBConnection.Connection.start_link, but that might just be because I'm still on a old version of db_connection, and the linked patch hasn't been released yet.