gmakstutis/LightRAG
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Potential fix for code scanning alert no. 8: Clear-text logging of sensitive information

Browse source 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
VenkateshPabbati 2025-04-09 20:40:25 +05:30 • committed by GitHub
parent 2aab17ed2a
commit c02e437104
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
lightrag/kg/tidb_impl.py
View file

@ -23,6 +23,12 @@ if not pm.is_installed("sqlalchemy"):
from sqlalchemy import create_engine, text # type: ignore from sqlalchemy import create_engine, text # type: ignore
def sanitize_sensitive_info(data: dict) -> dict:
sanitized_data = data.copy()
if 'password' in sanitized_data:
sanitized_data['password'] = '***'
return sanitized_data
class TiDB: class TiDB:
def __init__(self, config, **kwargs): def __init__(self, config, **kwargs):
self.host = config.get("host", None) self.host = config.get("host", None)
@ -69,7 +75,8 @@ class TiDB:
try: try:
result = conn.execute(text(sql), params) result = conn.execute(text(sql), params)
except Exception as e: except Exception as e:
logger.error(f"Tidb database,\nsql:{sql},\nparams:{params},\nerror:{e}") sanitized_params = sanitize_sensitive_info(params)
logger.error(f"Tidb database,\nsql:{sql},\nparams:{sanitized_params},\nerror:{e}")
raise raise
if multirows: if multirows:
rows = result.all() rows = result.all()
@ -94,7 +101,8 @@ class TiDB:
else: else:
conn.execute(text(sql), parameters=data) conn.execute(text(sql), parameters=data)
except Exception as e: except Exception as e:
logger.error(f"Tidb database,\nsql:{sql},\ndata:{data},\nerror:{e}") sanitized_data = sanitize_sensitive_info(data) if data else None
logger.error(f"Tidb database,\nsql:{sql},\ndata:{sanitized_data},\nerror:{e}")
raise raise