Potential fix for code scanning alert no. 15: Clear-text logging of sensitive information
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
@@ -78,7 +78,8 @@ class TiDB:
|
||||
result = conn.execute(text(sql), params)
|
||||
except Exception as e:
|
||||
sanitized_params = sanitize_sensitive_info(params)
|
||||
logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitize_sensitive_info(params)},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
|
||||
sanitized_params = sanitize_sensitive_info(params)
|
||||
logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitized_params},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
|
||||
raise
|
||||
if multirows:
|
||||
rows = result.all()
|
||||
@@ -104,7 +105,7 @@ class TiDB:
|
||||
conn.execute(text(sql), parameters=data)
|
||||
except Exception as e:
|
||||
sanitized_data = sanitize_sensitive_info(data) if data else None
|
||||
logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitize_sensitive_info(data) if data else None},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
|
||||
logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitized_data},\nerror:{sanitize_sensitive_info({'error': str(e)})}")
|
||||
raise
|
||||
|
||||
|
||||
|
Reference in New Issue
Block a user