-
Notifications
You must be signed in to change notification settings - Fork 0
Starlette parable #22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| Settings(first_octets='10.10', sla_requirement=2).add_to_db() | ||
|
|
||
| Settings(first_octets='10.10', sla_requirement=2) | ||
| print([(user[0].username, user[1]) for user in users]) |
Check failure
Code scanning / CodeQL
Clear-text logging of sensitive information High test
sensitive data (password)
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 11 months ago
To fix the problem, we need to ensure that sensitive information, such as passwords, is not logged in clear text. Instead of logging the passwords, we can log a placeholder or simply omit the passwords from the log. This can be achieved by modifying the print statement on line 86 to exclude the passwords.
- In general terms, the problem can be fixed by removing or masking the sensitive information before logging.
- Specifically, we will change the print statement on line 86 to only log the usernames without the passwords.
- The required change is in the file
test.pyon line 86.
-
Copy modified line R86
| @@ -85,3 +85,3 @@ | ||
|
|
||
| print([(user[0].username, user[1]) for user in users]) | ||
| print([user[0].username for user in users]) | ||
|
|
No description provided.