fix: sanitize user_id/server_id in log to prevent log injection

This commit is contained in:
Ishaan Jaffer 2026-03-11 19:30:43 -07:00
parent fd2eeb751c
commit 7259d4f6b4

View file

@ -101,9 +101,9 @@ if MCP_AVAILABLE:
return {"Authorization": f"Bearer {cred['access_token']}"}
except Exception:
verbose_logger.debug(
"Failed to fetch OAuth credential for user %s / server %s",
user_id,
server_id,
"Failed to fetch OAuth credential for user %r / server %r",
str(user_id).replace("\n", "\\n").replace("\r", "\\r"),
str(server_id).replace("\n", "\\n").replace("\r", "\\r"),
exc_info=True,
)
return None