Skip to content

Don't log to logcat, or otherwise redact logs, in production builds

Our logcat logs (from Rust and Java) contain a significant amount of information about what hosts the user is connecting to, etc. This is fine and useful for development, but we should take care to sanitize this before production; otherwise, this is a massive information disclosure problem waiting to happen!

see also https://developer.android.com/topic/security/risks/log-info-disclosure

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information