Add setting to redact username from logs for privacy#4902
Merged
Conversation
Marc-André Moreau (mamoreau-devolutions)
approved these changes
Jun 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request introduces a new privacy feature that allows users to hide their username from all logs generated by UniGetUI. When enabled, the user's name is replaced with
****in logs, crash reports, update logs, and operation outputs. This is controlled by a new setting, exposed in the UI and persisted in the application's settings. The implementation also refactors logging methods to centralize redaction logic and ensure consistent application across the codebase.Privacy Feature: Hide Username in Logs
RedactUsernameInLogto the settings engine and UI, allowing users to enable or disable username redaction in logs. The UI includes a checkbox with explanatory text in both Avalonia and WPF frontends.Core Logging and Redaction Logic
Logger.RedactUsernameproperty and a publicLogger.Redact(string)method that replaces the current user's name with****when redaction is enabled. Refactored all logging entry points to use a centralized privateAddmethod that applies redaction.Logger.Redactto crash report generation, update logs, and package operation logs to ensure the username is hidden everywhere when the setting is enabled.Initialization and Settings Integration
Logger.RedactUsernameat application startup based on the persisted setting value in both Avalonia and WPF entry points.This change improves user privacy by giving control over personally identifiable information in logs, and ensures the feature is applied consistently throughout the application.