fix(mcp): remove user-provided values from debug log to fix log-injection lint

This commit is contained in:
Ishaan Jaffer 2026-03-11 20:54:44 -07:00
parent d207c45766
commit 76a4415ecd

View file

@ -100,12 +100,7 @@ if MCP_AVAILABLE:
if cred and cred.get("access_token"):
return {"Authorization": f"Bearer {cred['access_token']}"}
except Exception:
verbose_logger.debug(
"Failed to fetch OAuth credential for user %r / server %r",
str(user_id).replace("\n", "\\n").replace("\r", "\\r"),
str(server_id).replace("\n", "\\n").replace("\r", "\\r"),
exc_info=True,
)
verbose_logger.debug("Failed to fetch OAuth credential", exc_info=True)
return None
async def _get_bulk_user_oauth_headers(
@ -137,11 +132,7 @@ if MCP_AVAILABLE:
if c.get("access_token") and c.get("server_id")
}
except Exception:
verbose_logger.debug(
"Failed to bulk-fetch OAuth credentials for user %r",
str(user_id).replace("\n", "\\n").replace("\r", "\\r"),
exc_info=True,
)
verbose_logger.debug("Failed to bulk-fetch OAuth credentials", exc_info=True)
return {}
def _create_tool_response_objects(tools, server_mcp_info):