gardel/lightrag
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2 from venkateshpabbati/alert-autofix-81

Browse Source 
Potential fix for code scanning alert no. 8: Clear-text logging of sensitive information
This commit is contained in:
VenkateshPabbati
2025-04-09 20:47:18 +05:30
committed by GitHub
parent 2aab17ed2a f1063e0e12
commit 841928066b
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
lightrag/kg/tidb_impl.py
View File

@@ -23,6 +23,14 @@ if not pm.is_installed("sqlalchemy"):
from sqlalchemy import create_engine, text # type: ignore
def sanitize_sensitive_info(data: dict) -> dict:
sanitized_data = data.copy()
sensitive_fields = ['password', 'user', 'host', 'database']
for field in sensitive_fields:
if field in sanitized_data:
sanitized_data[field] = '***'
return sanitized_data
class TiDB:
def __init__(self, config, **kwargs):
self.host = config.get("host", None)
@@ -69,7 +77,8 @@ class TiDB:
try:
result = conn.execute(text(sql), params)
except Exception as e:
logger.error(f"Tidb database,\nsql:{sql},\nparams:{params},\nerror:{e}")
sanitized_params = sanitize_sensitive_info(params)
logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitized_params},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
raise
if multirows:
rows = result.all()
@@ -94,7 +103,8 @@ class TiDB:
else:
conn.execute(text(sql), parameters=data)
except Exception as e:
logger.error(f"Tidb database,\nsql:{sql},\ndata:{data},\nerror:{e}")
sanitized_data = sanitize_sensitive_info(data) if data else None
logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitized_data},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
raise