Jian Qiu 2aace16f5f fix: mask tokens and passwords in logs (#25489) ...

Full session tokens were written to logs in policy.go, mcclient auth,
oidc handler and the webconsole session manager; guest root passwords
were logged by the linux fsdriver and the nbdkit mount command; MCP
tool arguments and full JSON-RPC bodies (which may contain
server-reset-password passwords) were logged by the llm agent.

Truncate tokens in log messages, drop or mask password values and
log only the tool/method name for MCP calls.

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Claude <noreply@anthropic.com>

2026-09-03 19:20:25 +08:00

..

deploy_iface

…

fsutils

fix(host-deployer): mount procfs before deploy guestfs (#25087)

2026-07-01 00:53:59 +08:00

libguestfs

…

nbd

…

qemu_kvm

fix(hostman): harden deployer command execution against shell injection (#25477)

2026-09-03 17:59:23 +08:00

doc.go

…

interface.go

…

kvm.go

…

nbdkit_test.go

…

nbdkit.go

fix: mask tokens and passwords in logs (#25489)

2026-09-03 19:20:25 +08:00

vddk.go

…