Title: EchoDash's Replies | WordPress.org

---

# EchoDash

  [  ](https://wordpress.org/support/users/echodash/)

 *   [Profile](https://wordpress.org/support/users/echodash/)
 *   [Topics Started](https://wordpress.org/support/users/echodash/topics/)
 *   [Replies Created](https://wordpress.org/support/users/echodash/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/echodash/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/echodash/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/echodash/engagements/)
 *   [Favorites](https://wordpress.org/support/users/echodash/favorites/)

 Search replies:

## Forum Replies Created

Viewing 1 replies (of 1 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Fatal Error Notify] Security weakness](https://wordpress.org/support/topic/security-weakness/)
 *  [EchoDash](https://wordpress.org/support/users/echodash/)
 * (@echodash)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/security-weakness/#post-18314930)
 * Thanks [@tufty](https://wordpress.org/support/users/tufty/) !
 * Yes actually this was pointed out by one of our Pro customers last year, and 
   we have updated it already in that plugin.
 * It’s not 100% infallible but we now strip out any parameters in the URL or error
   notification message (in the case of HTTP timeout errors) that match (in whole
   or part):
 *     ```wp-block-code
       'password','api_key','apikey','secret','access_token','client_secret','auth','authorization','key','token'
       ```
   
 * And these are replaced by `[REMOVED]`. We are overdue for an update to the free
   plugin, I will try to get that sent out in the next few weeks. Thanks for pointing
   it out 🙂

Viewing 1 replies (of 1 total)