Merge pull request #5 from TeaEntityLab/alert-autofix-6

johnteee · web-flow · commit e6a74e47deb3 · 2026-05-14T18:45:14.000+08:00
Potential fix for code scanning alert no. 6: Clear-text logging of sensitive information
diff --git a/teaagent/cli/_handlers/_mcp.py b/teaagent/cli/_handlers/_mcp.py
@@ -44,7 +44,7 @@ def mcp_serve_command(args: argparse.Namespace) -> int:
                 parts = spec.split(':', 2)
                 if len(parts) != 3:
                     print(
-                        f'Invalid --oauth-client format: {spec} (expected ID:SECRET:REDIRECT_URI)',
+                        'Invalid --oauth-client format (expected ID:SECRET:REDIRECT_URI).',
                         file=sys.stderr,
                     )
                     return 1

Original file line number	Diff line number	Diff line change
`@@ -44,7 +44,7 @@ def mcp_serve_command(args: argparse.Namespace) -> int:`
`44`	`44`	`parts = spec.split(':', 2)`
`45`	`45`	`if len(parts) != 3:`
`46`	`46`	`print(`
`47`		`- f'Invalid --oauth-client format: {spec} (expected ID:SECRET:REDIRECT_URI)',`
	`47`	`+ 'Invalid --oauth-client format (expected ID:SECRET:REDIRECT_URI).',`
`48`	`48`	`file=sys.stderr,`
`49`	`49`	`)`
`50`	`50`	`return 1`