Skip to content

Commit f2dceed

Browse files
authored
Add a note that obfuscate literals does not work with malformed queries (#2318) (#2324)
1 parent 1a14b79 commit f2dceed

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

modules/ROOT/pages/configuration/configuration-settings.adoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2457,6 +2457,10 @@ a|A boolean.
24572457
m|+++false+++
24582458
|===
24592459

2460+
[NOTE]
2461+
====
2462+
Keep in mind that if Neo4j receives a malformed query that cannot be parsed, it cannot obfuscate its literals (because it does not know which parts are literals) and, therefore, the query text will not be included in any logging.
2463+
====
24602464

24612465
[role=label--dynamic]
24622466
[[config_db.logs.query.parameter_logging_enabled]]

modules/ROOT/pages/monitoring/logging.adoc

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -875,8 +875,10 @@ This is useful when Cypher queries expose sensitive information.
875875
====
876876
Node labels, relationship types, and map property keys are still shown.
877877
Changing the setting does not affect cached queries.
878-
Therefore, if you want the switch to have an immediate effect, you must also clear the query cache; `CALL db.clearQueryCaches()`.
878+
Therefore, if you want the switch to have an immediate effect, you must also clear the query cache; `CALL db.clearQueryCaches()`. +
879+
Also, keep in mind that if Neo4j receives a malformed query that cannot be parsed, it cannot obfuscate its literals (because it does not know which parts are literals) and, therefore, the query text will not be included in any logging.
879880
====
881+
880882
[WARNING]
881883
====
882884
This does not obfuscate literals in parameters.

0 commit comments

Comments
 (0)