forks/go-ethereum
1
0
Fork 1
mirror of https://github.com/ethereum/go-ethereum.git synced 2026-07-25 22:26:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Potential fix for code scanning alert no. 6: Clear-text logging of sensitive information

Browse source 
Romeo Rosete

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Romeo Rosete 2025-05-20 11:21:23 -04:00 committed by GitHub
parent e8b2dc2758
commit 44c373db68
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
cmd/clef/main.go
View file

@ -1085,6 +1085,10 @@ func GenDoc(ctx *cli.Context) error {
} }
output []string output []string
add = func(name, desc string, v interface{}) { add = func(name, desc string, v interface{}) {
// Sanitize sensitive fields before logging
if req, ok := v.(*core.UserInputRequest); ok && req.IsPassword {
req.IsPassword = false // Obfuscate sensitive metadata
}
if data, err := json.MarshalIndent(v, "", " "); err == nil { if data, err := json.MarshalIndent(v, "", " "); err == nil {
output = append(output, fmt.Sprintf("### %s\n\n%s\n\nExample:\n```json\n%s\n```", name, desc, data)) output = append(output, fmt.Sprintf("### %s\n\n%s\n\nExample:\n```json\n%s\n```", name, desc, data))
} else { } else {