Stop logging extension numbers in 3CX queue updates

Resolves 3 high CodeQL py/clear-text-logging-sensitive-data alerts: the
queue/ring-group forwarding logs no longer include the routed extension
values (closed/holiday/extension). Non-sensitive context (resource id,
queue number) is retained.
This commit is contained in:
Adam Moussa 2026-06-01 19:05:01 -04:00
parent 21dd11ada6
commit 42edf62952
2 changed files with 2 additions and 8 deletions

View file

@ -27,5 +27,5 @@ def update_queue_routing(
closed=extension,
holiday=extension,
)
logger.info("Updated queue %s to forward to Ext %s", queue_number, extension)
logger.info("Updated queue %s forwarding", queue_number)
return {"extension": extension, "queue": queue_number}

View file

@ -102,13 +102,7 @@ class ThreeCXClient:
json=payload,
)
resp.raise_for_status()
logger.info(
"Updated %s %s: closed->Ext %s, holiday->Ext %s",
resource,
resource_id,
closed,
holiday,
)
logger.info("Updated %s %s forwarding", resource, resource_id)
return resp.status_code
def get_ring_group(self, extension_number: str) -> dict: