Skip to content

Commit 8e59474

Browse files
authored
Add a note that obfuscate literals does not work with malformed queries (neo4j#2318) (neo4j#2326)
1 parent 12360cc commit 8e59474

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

modules/ROOT/pages/configuration/configuration-settings.adoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2616,6 +2616,10 @@ a|A boolean.
26162616
m|+++false+++
26172617
|===
26182618

2619+
[NOTE]
2620+
====
2621+
Keep in mind that if Neo4j receives a malformed query that cannot be parsed, it cannot obfuscate its literals (because it does not know which parts are literals) and, therefore, the query text will not be included in any logging.
2622+
====
26192623

26202624
[role=label--dynamic]
26212625
[[config_db.logs.query.parameter_logging_enabled]]

modules/ROOT/pages/monitoring/logging.adoc

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -840,8 +840,10 @@ This is useful when Cypher queries expose sensitive information.
840840
====
841841
Node labels, relationship types, and map property keys are still shown.
842842
Changing the setting does not affect cached queries.
843-
Therefore, if you want the switch to have an immediate effect, you must also clear the query cache; `CALL db.clearQueryCaches()`.
843+
Therefore, if you want the switch to have an immediate effect, you must also clear the query cache; `CALL db.clearQueryCaches()`. +
844+
Also, keep in mind that if Neo4j receives a malformed query that cannot be parsed, it cannot obfuscate its literals (because it does not know which parts are literals) and, therefore, the query text will not be included in any logging.
844845
====
846+
845847
[WARNING]
846848
====
847849
This does not obfuscate literals in parameters.

0 commit comments

Comments
 (0)