executor: remove sensitive information in slow-log and statement (#18107)

[ti-srebot]

cherry-pick #18107 to release-3.1

---

Signed-off-by: crazycs520 [email protected]

What problem does this PR solve?

Before this PR, TiDB slow log will record sensitive information such as passwords in slow-log query.

This PR remove sensitive information in slow-log. Such as below:

execute below sql:

set tidb_slow_log_threshold=0;
create user u1 identified by "456789";
alter user 'u1'@'%' identified by 'abcd';
set password for 'u1'@'%' = 'abcsdafd';

The related slow-log will be:

create user {u1@% password = ***};
alter user {u1@% password = ***};
set password for user u1@%;

the related statement will be:

mysql>select query_sample_text from `STATEMENTS_SUMMARY` where query_sample_text like "set password%" or query_sample_text like "create user%" or query_sample_text like 'alter user%';
+-----------------------------------+
| query_sample_text                 |
+-----------------------------------+
| alter user {u1@% password = ***}  |
| create user {u1@% password = ***} |
| set password for user u1@%        |
+-----------------------------------+

What is changed and how it works?

Proposal: xxx

What's Changed:

How it Works:

Related changes

• Need to cherry-pick to the release branch

Check List

Tests

• Manual test (add detailed scripts or steps below)

Side effects

• Performance regression
  • Consumes more CPU
  • Consumes more MEM
• Breaking backward compatibility

Release note

• Remove sensitive information in slow-log and statement.

[ti-srebot]

/run-all-tests

[bb7133]

Please resolve the conflict @crazycs520

[zimulala]

Please resolve the conflict @crazycs520

[crazycs520]

/run-all-tests

[zimulala]

LGTM

[ti-srebot]

@zimulala,Thanks for you review.

[AilinKid]

LGTM

[ti-srebot]

@AilinKid,Thanks for your review.

[AilinKid]

/run-all-tests

[crazycs520]

/rebuild

[SunRunAway]

/merge

[ti-srebot]

/run-all-tests