Merge pull request #578 from fendor/fix/security-list-env-vars

List Env Vars we care about only

Author: fendor

src/extension.ts

@@ -142,7 +142,12 @@ async function activateServerForFolder(context: ExtensionContext, uri: Uri, fold
   }
   logger.log('Environment variables:');
   Object.entries(process.env).forEach(([key, value]: [string, string | undefined]) => {
-    logger.log(`  ${key}: ${value}`);
+    // only list environment variables that we actually care about.
+    // this makes it safe for users to just paste the logs to whoever,
+    // and avoids leaking secrets.
+    if (["PATH"].includes(key)) {
+      logger.log(`  ${key}: ${value}`);
+    }
   });
 
   let serverExecutable: string;