@@ -507,8 +507,20 @@ showVerboseInfo mbTmpDir program programArgs env source = do
507507 UTF8.hPutStrLn stderr $
508508 T.pack program <> " " <> T.pack (unwords (map show programArgs))
509509 UTF8.hPutStr stderr "\n"
510− UTF8.hPutStrLn stderr "[makePDF] Environment:"
511− mapM_ (UTF8.hPutStrLn stderr . tshow) env
510+ UTF8.hPutStrLn stderr "[makePDF] Relevant environment variables:"
511+ -- we filter out irrelevant stuff to avoid leaking passwords and keys!
512+ let isRelevant ("PATH",_) = True
513+ isRelevant ("TMPDIR",_) = True
514+ isRelevant ("PWD",_) = True
515+ isRelevant ("LANG",_) = True
516+ isRelevant ("HOME",_) = True
517+ isRelevant ("LUA_PATH",_) = True
518+ isRelevant ("LUA_CPATH",_) = True
519+ isRelevant ("SHELL",_) = True
520+ isRelevant ("TEXINPUTS",_) = True
521+ isRelevant ("TEXMFOUTPUT",_) = True
522+ isRelevant _ = False
523+ mapM_ (UTF8.hPutStrLn stderr . tshow) (filter isRelevant env)
512524 UTF8.hPutStr stderr "\n"
513525 UTF8.hPutStrLn stderr "[makePDF] Source:"
514526 UTF8.hPutStrLn stderr source