Merge pull request #1816 from dbcli/RW/do-not-log-ssh-passwords

Avoid logging SSH passwords

Author: rolandwalker

changelog.md

@@ -19,6 +19,7 @@ Bug Fixes
 * Make multi-line detection and special cases more robust.
 * Run empty `--execute` arguments instead of ignoring the flag.
 * Exit with error when the `--batch` argument is an empty string.
+* Avoid logging SSH passwords.
 
 
 Internal

mycli/sqlexecute.py

@@ -245,7 +245,7 @@ def connect(
             "\tssh_user: %r"
             "\tssh_host: %r"
             "\tssh_port: %r"
-            "\tssh_password: %r"
+            "\tssh_password: ***"
             "\tssh_key_filename: %r"
             "\tinit_command: %r"
             "\tunbuffered: %r",
@@ -260,7 +260,6 @@ def connect(
             ssh_user,
             ssh_host,
             ssh_port,
-            ssh_password,
             ssh_key_filename,
             init_command,
             unbuffered,