From a0bf1cae030b33cfbd18f4d9697b0f27e47d3f03 Mon Sep 17 00:00:00 2001 From: Yassen Damyanov Date: Thu, 22 Sep 2022 15:22:45 +0300 Subject: [PATCH] fixup! Remove URL.__str__ causing a fallback to URL.__repr__ Add changelog description file --- doc/build/changelog/unreleased_20/8547.rst | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 doc/build/changelog/unreleased_20/8547.rst diff --git a/doc/build/changelog/unreleased_20/8547.rst b/doc/build/changelog/unreleased_20/8547.rst new file mode 100644 index 0000000000..48b5518395 --- /dev/null +++ b/doc/build/changelog/unreleased_20/8547.rst @@ -0,0 +1,9 @@ +.. change:: + :tags: bug, engine + :tickets: 8547 + + For improved security, :class:`engine.URL` gets its ``__str__`` method + removed to avoid accidental password leakage. ``str(engine.URL())`` will + now fallback to :method:`engine.URL.__repr__` which censors the password. + :method:`engine.URL.render_as_string(hide_password=False)` is still + available for cases when clear text password is necessary. -- 2.47.3