From 19a22be59caf04c93b50abdcd727cf91d55abab1 Mon Sep 17 00:00:00 2001
From: pax <paxxe@protonmail.com>
Date: Sat, 11 Apr 2026 16:13:25 -0500
Subject: [PATCH] =?UTF-8?q?security:=20fix=20#3=20=E2=80=94=20redact=20par?=
 =?UTF-8?q?ams=20in=20GelbooruClient=20debug=20log?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Same fix as danbooru.py and e621.py — Gelbooru's params dict
carries api_key + user_id when configured. Route through
redact_params() before the debug log emits them.

Audit-Ref: SECURITY_AUDIT.md finding #3
Severity: Medium
---
 booru_viewer/core/api/gelbooru.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/booru_viewer/core/api/gelbooru.py b/booru_viewer/core/api/gelbooru.py
index 96a3510..abdcd5c 100644
--- a/booru_viewer/core/api/gelbooru.py
+++ b/booru_viewer/core/api/gelbooru.py
@@ -5,6 +5,7 @@ from __future__ import annotations
 import logging
 
 from ..config import DEFAULT_PAGE_SIZE
+from ._safety import redact_params
 from .base import BooruClient, Post, _parse_date
 
 log = logging.getLogger("booru")
@@ -43,7 +44,7 @@ class GelbooruClient(BooruClient):
 
         url = f"{self.base_url}/index.php"
         log.info(f"GET {url}")
-        log.debug(f"  params: {params}")
+        log.debug(f"  params: {redact_params(params)}")
         resp = await self._request("GET", url, params=params)
         log.info(f"  -> {resp.status_code}")
         if resp.status_code != 200: