Potential fix for code scanning alert no. 16: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
VenkateshPabbati
2025-04-09 20:58:41 +05:30
committed by GitHub
parent 3c62489a18
commit a4a8033641

View File

@@ -78,7 +78,7 @@ class TiDB:
result = conn.execute(text(sql), params) result = conn.execute(text(sql), params)
except Exception as e: except Exception as e:
sanitized_params = sanitize_sensitive_info(params) sanitized_params = sanitize_sensitive_info(params)
logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitize_sensitive_info(sanitized_params)},\nerror:{e}") logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitized_params},\nerror:{e}")
raise raise
if multirows: if multirows:
rows = result.all() rows = result.all()
@@ -104,7 +104,7 @@ class TiDB:
conn.execute(text(sql), parameters=data) conn.execute(text(sql), parameters=data)
except Exception as e: except Exception as e:
sanitized_data = sanitize_sensitive_info(data) if data else None sanitized_data = sanitize_sensitive_info(data) if data else None
logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitize_sensitive_info(sanitized_data)},\nerror:{e}") logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitized_data},\nerror:{e}")
raise raise