yyqdbngt opened a new pull request, #3430:
URL: https://github.com/apache/rocketmq-dashboard/pull/3430

   ### Summary
   
   `LlmProperties` is a Lombok `@Data` configuration bean whose `token` field 
holds the LLM provider token. The generated `toString()` therefore printed the 
token verbatim whenever the bean entered a log line, contradicting the class's 
own javadoc that tokens must never be logged.
   
   ### Changes
   
   - Annotate `token` with `@ToString.Exclude` so the provider token stays out 
of `toString()` output
   - Add `LlmPropertiesTest` asserting non-sensitive fields are still visible 
while the token is not
   
   ### Testing
   
   `mvn test -Dtest=LlmPropertiesTest` passes: 1 test, 0 failures.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to