Resolve 18 CodeQL cleartext-logging/cleartext-transmission alerts by removing sensitive data from Debug output entirely rather than redacting. Changes: - memory/mod.rs: omit api_key from ResolvedEmbeddingConfig Debug - tools/browser.rs: omit api_key from ComputerUseConfig Debug - providers/mod.rs: omit access_token/refresh_token from QwenOauthCredentials Debug, credential from QwenOauthProviderContext - memory/traits.rs: custom Debug for MemoryEntry omitting session_id - auth/profiles.rs: custom Debug for AuthProfile omitting token, token_set, account_id - channels/matrix.rs: add Debug impl for MatrixChannel omitting access_token - channels/qq.rs: sanitize user_id before URL interpolation - channels/whatsapp_storage.rs: document false-positive analysis Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| anthropic_token.rs | ||
| mod.rs | ||
| openai_oauth.rs | ||
| profiles.rs | ||