This is an automated email from the ASF dual-hosted git repository.

yesamer pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-kogito-apps.git


The following commit(s) were added to refs/heads/main by this push:
     new fef169fd6 [incubator-kie-issues#2361] fix log forging cwe (#2347)
fef169fd6 is described below

commit fef169fd6fc548ddba1003cf5525867f59e1f245
Author: AthiraHari77 <[email protected]>
AuthorDate: Thu Jul 9 18:50:19 2026 +0530

    [incubator-kie-issues#2361] fix log forging cwe (#2347)
    
    Co-authored-by: athira <[email protected]>
---
 .../java/org/kie/kogito/app/audit/api/DataAuditQuery.java   | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git 
a/data-audit/data-audit-common/src/main/java/org/kie/kogito/app/audit/api/DataAuditQuery.java
 
b/data-audit/data-audit-common/src/main/java/org/kie/kogito/app/audit/api/DataAuditQuery.java
index 9aa3b680f..59b2d3ff7 100644
--- 
a/data-audit/data-audit-common/src/main/java/org/kie/kogito/app/audit/api/DataAuditQuery.java
+++ 
b/data-audit/data-audit-common/src/main/java/org/kie/kogito/app/audit/api/DataAuditQuery.java
@@ -53,12 +53,19 @@ public class DataAuditQuery {
     @Override
     public String toString() {
         return "DataAuditQuery [identifier="
-                + identifier.replace('\n', '_').replace('\r', '_')
+                + sanitize(identifier)
                 + ", graphQLDefinition="
-                + graphQLDefinition.replace('\n', '_').replace('\r', '_')
+                + sanitize(graphQLDefinition)
                 + ", query="
-                + query.replace('\n', '_').replace('\r', '_')
+                + sanitize(query)
                 + "]";
     }
 
+    private static String sanitize(String value) {
+        if (value == null) {
+            return null;
+        }
+        return value.replaceAll("\\R+", "_");
+    }
+
 }


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to