FreeOnePlus opened a new pull request, #127: URL: https://github.com/apache/doris-mcp-server/pull/127
## Summary - add a shared redaction boundary for Authorization values, passwords, tokens, secrets, credential-bearing URIs, and SQL literals - sanitize authentication, resource, tool, and unhandled MCP error responses while leaving successful query results unchanged - remove raw SQL, response bodies, token identifiers, and backend exception details from operational logs - cover Streamable HTTP, real subprocess Stdio, authentication, manager, and real Doris failure paths ## Why Backend exceptions and diagnostic logs could echo request arguments, credentials, or SQL values. A centralized logging filter plus explicit public-error sanitization prevents those values from crossing log and protocol boundaries. ## Validation - `uv run pytest -q`: 558 passed, 61 skipped - protocol matrix: 18 passed, including Streamable HTTP, real subprocess Stdio, and multi-worker coverage - real Doris transport matrix: 4 passed across Streamable HTTP and Stdio; temporary tables/users cleaned up - focused security regression: 57 passed - Ruff, format check, compileall, scoped mypy, `uv lock --check`, and `git diff --check` - wheel/sdist build, forbidden-content inspection, and isolated wheel CLI smoke test -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
