pax 9a3bb697ec security: fix #3 — redact params in DanbooruClient debug log ...

The log.debug(f"  params: {params}") line in search() previously
dumped login + api_key to the booru logger at DEBUG level. Route
the params dict through redact_params() so the keys are replaced
with *** before formatting.

Audit-Ref: SECURITY_AUDIT.md finding #3
Severity: Medium

2026-04-11 16:12:47 -05:00

..

api

security: fix #3 — redact params in DanbooruClient debug log

2026-04-11 16:12:47 -05:00

__init__.py

Initial release — booru image viewer with Qt6 GUI and Textual TUI

2026-04-04 06:00:50 -05:00

cache.py

security: fix #1 — wire SSRF hook into cache download client

2026-04-11 16:10:50 -05:00

concurrency.py

Route async work through one persistent loop, lock shared httpx + DB writes

2026-04-07 17:24:23 -05:00

config.py

config: find_library_files now matches templated filenames

2026-04-09 18:25:21 -05:00

db.py

add search history setting

2026-04-10 16:28:43 -05:00

images.py

Initial release — booru image viewer with Qt6 GUI and Textual TUI

2026-04-04 06:00:50 -05:00

library_save.py

library_save: ensure categories before template render

2026-04-09 19:18:13 -05:00