Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix code scanning alerts per logging #522

Open
1 task
jordanpadams opened this issue Aug 2, 2024 · 1 comment
Open
1 task

Fix code scanning alerts per logging #522

jordanpadams opened this issue Aug 2, 2024 · 1 comment
Assignees
@jordanpadams @alexdunnjpl
Labels
B15.0 bug Something isn't working open.1.5.0 s.high High severity security

Comments

@jordanpadams
Copy link
Member

Tracking issue for:

Per https://github.com/NASA-PDS/registry-api/blob/develop/service/src/main/java/gov/nasa/pds/api/registry/search/RegistrySearchRequestBuilder.java#L309:

Is this sanitized prior to logging?
@jordanpadams jordanpadams added B15.0 bug Something isn't working s.high High severity security labels Aug 2, 2024
@jordanpadams jordanpadams self-assigned this Aug 6, 2024
@jordanpadams
Copy link
Member Author

@alexdunnjpl any idea if this query string is sanitized prior to logging?

https://github.com/NASA-PDS/registry-api/blob/develop/service/src/main/java/gov/nasa/pds/api/registry/search/RegistrySearchRequestBuilder.java#L309

@alexdunnjpl alexdunnjpl mentioned this issue Sep 11, 2024
Merged
@alexdunnjpl alexdunnjpl self-assigned this Sep 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jordanpadams jordanpadams

@alexdunnjpl alexdunnjpl

Labels
B15.0 bug Something isn't working open.1.5.0 s.high High severity security
Projects
B15.0
Status: Release Backlog
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jordanpadams @pdsen-ci @alexdunnjpl