Function RedactErrorForLog

server/usersecrets/redact.go:66–74

RedactErrorForLog returns an error message safe to log/store alongside query. When query carries CREATE SECRET DDL anywhere (head or a later top-level statement), the engine's error text may echo the secret literal, so the whole message is replaced with a fixed placeholder. Over-redaction only costs

(query, errMsg string)

// also emits an error: RedactForLog scrubs the query attribute, RedactErrorForLog
// scrubs the error attribute.
func RedactErrorForLog(query, errMsg string) string {
	if errMsg == "" {
		return errMsg
	}
	if queryHasCreateSecret(query) {
		return redactedErrorPlaceholder
	}
	return errMsg
}

// queryHasCreateSecret reports whether query contains a CREATE SECRET at its
// head or in any top-level statement. It shares the tokenizer with RedactForLog