copilot-swe-agent[bot] d0cd4c89f0 security: fix CodeQL CWE-312 clear-text logging of sensitive information ...

Remove user_id (and Stripe-metadata-sourced plan_id/billing_cycle) from
logger.info calls in billing.py (_on_checkout_completed, _on_subscription_updated)
and onboarding.py (save_plan). Operations are still logged with non-identifying
tier/billing-cycle details; user identity is no longer written to the log stream.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-07 15:15:00 +00:00

..

__init__.py

Merge branch 'main' of https://github.com/christianlouis/DocuElevate into copilot/fix-pricing-page-issues

2026-03-07 14:47:29 +00:00

admin_users.py

feat(subscriptions): database-backed plan designer with admin CRUD and overage buffer

2026-03-06 18:48:27 +00:00

azure.py

style: fix all flake8 linter errors across app/ directory

2026-02-08 17:42:33 +00:00

billing.py

security: fix CodeQL CWE-312 clear-text logging of sensitive information

2026-03-07 15:15:00 +00:00

common.py

refactor: consolidate get_db into single module

2026-02-09 15:37:23 +00:00

database.py

fix: address code review feedback

2026-03-05 22:22:49 +00:00

diagnostic.py

feat(api): add GET /api/diagnostic/health endpoint for monitoring

2026-03-01 18:36:38 +00:00

dropbox.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

duplicates.py

feat(duplicates): add duplicate document detection and management

2026-03-02 10:21:57 +00:00

files.py

refactor(pipelines): address code review - shared get_current_user_id, aria-live, deduplicate user ID logic

2026-03-07 10:39:19 +00:00

google_drive.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

local_auth.py

fix: gate LocalUser machinery on multi_user_enabled for single-user backward compat

2026-03-07 13:35:10 +00:00

logs.py

feat(security): add comprehensive input validation and sanitization (#172)

2026-02-22 16:02:00 +00:00

onboarding.py

security: fix CodeQL CWE-312 clear-text logging of sensitive information

2026-03-07 15:15:00 +00:00

onedrive.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

openai.py

fix(api): swap parameter order in test_ai_extraction to fix 500 error

2026-02-23 21:35:36 +00:00

pipelines.py

fix(pipelines): seed standard processing pipeline as system default on startup

2026-03-07 10:58:39 +00:00

plans.py

feat(subscriptions): database-backed plan designer with admin CRUD and overage buffer

2026-03-06 18:48:27 +00:00

process.py

Apply Black and isort formatting to modified files

2026-02-07 15:00:18 +00:00

queue.py

refactor(queue): address code review feedback — extract constants and sync refresh interval

2026-02-27 00:47:58 +00:00

saved_searches.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

search.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

settings.py

feat(settings): add dynamic autocomplete for AWS/Azure regions, OCR langs, and embedding models

2026-03-05 22:00:22 +00:00

similarity.py

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

subscriptions.py

fix(subscriptions): address code review feedback

2026-03-06 16:10:00 +00:00

url_upload.py

feat(upload): adaptive 429 backoff, full Gotenberg file types, directory traversal

2026-02-26 23:24:26 +00:00

user.py

feat(ui): add user autocomplete widget for default_owner_id, user search API, and documentation

2026-03-05 21:40:41 +00:00

webhooks.py

feat(webhooks): add webhook support for external integrations

2026-03-01 20:42:57 +00:00