pyinvoke / invoke

Pythonic task management & command execution.
http://pyinvoke.org
BSD 2-Clause "Simplified" License
4.31k stars 365 forks source link

refactor: parameterize debug #920

Open kuwv opened 1 year ago

kuwv commented 1 year ago

Debugging within the logging module is designed to use parameterized variables instead of interpolation.

https://github.com/python/cpython/blob/main/Lib/logging/__init__.py#L503

Due to the serialization capabilities built within the logging module it is unsafe to use interpolation with its methods. This will help prevent vulnerabilities for those implementing invoke as a library.