mongodb Secure Logging Guidelines
Follow these rules when handling sensitive values:
- Never log the connection string to the console.
- Never log the user password or write it to a file.
- Never store the password in plaintext.
These are cautionary examples: the prose describes what not to do, so a scanner must not flag the guidance itself.