Skip to content

Commit fef169f

Browse files
AthiraHari77athira
andauthored
[incubator-kie-issues#2361] fix log forging cwe (#2347)
Co-authored-by: athira <athira77@ibm.com>
1 parent eb2e3ff commit fef169f

1 file changed

Lines changed: 10 additions & 3 deletions

File tree

data-audit/data-audit-common/src/main/java/org/kie/kogito/app/audit/api/DataAuditQuery.java

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,12 +53,19 @@ public void setQuery(String query) {
5353
@Override
5454
public String toString() {
5555
return "DataAuditQuery [identifier="
56-
+ identifier.replace('\n', '_').replace('\r', '_')
56+
+ sanitize(identifier)
5757
+ ", graphQLDefinition="
58-
+ graphQLDefinition.replace('\n', '_').replace('\r', '_')
58+
+ sanitize(graphQLDefinition)
5959
+ ", query="
60-
+ query.replace('\n', '_').replace('\r', '_')
60+
+ sanitize(query)
6161
+ "]";
6262
}
6363

64+
private static String sanitize(String value) {
65+
if (value == null) {
66+
return null;
67+
}
68+
return value.replaceAll("\\R+", "_");
69+
}
70+
6471
}

0 commit comments

Comments
 (0)