Closed yacosta738 closed 1 month ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 91.52%. Comparing base (
284aeb0
) to head (67daac0
). Report is 10 commits behind head on main.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Fixes https://github.com/dallay/lyra/security/code-scanning/173
To fix the log injection issue, we need to sanitize the user input before logging it. Specifically, we should remove any newline characters from the email address to prevent log injection attacks. This can be achieved by replacing newline characters with an empty string.
registerNewUser
method inUserRegistrator.kt
to sanitize theregisterUserCommand.email
before logging it.Suggested fixes powered by Copilot Autofix. Review carefully before merging.