Skip to content

Commit dc7fb9b

Browse files
leeandherClaude Opus 4.6
andcommitted
fix(serializers): Remove sensitive data from serializer exception logging
Remove the exception object from logger extras to avoid logging sensitive data (secrets, passwords) in cleartext, as flagged by CodeQL. The exception traceback is still captured by logger.exception and sentry_sdk.capture_exception. Co-Authored-By: Claude Opus 4.6 <noreply@example.com>
1 parent 0cfca81 commit dc7fb9b

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/sentry/api/serializers/base.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,8 @@ def _serialize(
118118
try:
119119
return self.serialize(obj, attrs, user, **kwargs)
120120
except Exception as e:
121-
logger.exception("Failed to serialize", extra={"instance": obj, "exception": e})
121+
logger.exception("Failed to serialize", extra={"instance": obj})
122+
sentry_sdk.capture_exception(e)
122123
return None
123124

124125
def serialize(

0 commit comments

Comments
 (0)