Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion doc/更新日志.txt
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
V7.12.7
V7.12.8
更新时间 2026-04-28

* OneBot 支持 _get_group_notice API 获取群公告是否发送给新成员
Expand Down
2 changes: 1 addition & 1 deletion package-dist.json
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"name":"llonebot-dist","version":"7.12.7","type":"module","description":"","main":"llbot.js","author":"linyuchen","repository":{"type":"git","url":"https://github.com/LLOneBot/LuckyLilliaBot"}}
{"name":"llonebot-dist","version":"7.12.8","type":"module","description":"","main":"llbot.js","author":"linyuchen","repository":{"type":"git","url":"https://github.com/LLOneBot/LuckyLilliaBot"}}
2 changes: 1 addition & 1 deletion src/onebot11/action/group/GetGroupMemberInfo.ts
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ class GetGroupMemberInfo extends BaseAction<Payload, OB11GroupMember> {
}
}
if (info) {
this.ctx.logger.info(info.simpleInfo.baseInfo)
this.ctx.logger.info(info)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚨 suggestion (security): 将完整的 info 对象记录到日志中可能会产生大量噪声,并包含不必要或敏感的数据;建议缩小日志内容范围或调整日志级别。

这一改动会记录整个 info 对象,而不是 info.simpleInfo.baseInfo,这可能会增加日志体积并暴露额外字段(包括可能的标识符/个人隐私信息)。如果确实需要完整对象用于诊断,建议只记录必要的子集,或者将日志级别降为 debug/trace。

Original comment in English

🚨 suggestion (security): Logging the full info object may be noisy and could include unnecessary or sensitive data; consider narrowing or changing the log level.

This change logs the entire info object instead of info.simpleInfo.baseInfo, which may increase log volume and expose additional fields (including possible identifiers/PII). Consider logging only the required subset or lowering this to debug/trace if the full object is needed for diagnostics.

ret.sex = OB11Entities.sex(info.simpleInfo.baseInfo.sex)
ret.qq_level = info.commonExt?.qqLevel && calcQQLevel(info.commonExt.qqLevel) || 0
ret.age = info.simpleInfo.baseInfo.age ?? 0
Expand Down
2 changes: 1 addition & 1 deletion src/version.ts
Original file line number Diff line number Diff line change
@@ -1 +1 @@
export const version = '7.12.7'
export const version = '7.12.8'
Loading