Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Prevent sqlalchemy's lack of url encoding from leaking passwords
Switches away from using `str(engine_instance.engine)` for rendering connection strings, in order to prevent passwords containing characters such as `#` from leaking. The name of the segment will contain the password if this character is used, likely others as well. See: https://bugs.python.org/issue18140 and encode/database#145 The code in question is here: sqlalchemy/sqlalchemy/blob/aea28a9/lib/sqlalchemy/engine/url.py#L597-L630
- Loading branch information