Closed yacosta738 closed 1 month ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 91.52%. Comparing base (
05a2c01
) to head (ce6d89d
). Report is 1 commits behind head on main.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Fixes https://github.com/dallay/lyra/security/code-scanning/167
To fix the log injection issue, we need to sanitize the
query.username
before logging it. The best way to do this is to remove any potentially harmful characters, such as newlines, that could be used to forge log entries. We can use thereplace
method to replace newline characters with an empty string. This change should be made in thehandle
method of theAuthenticateUserQueryHandler
class.Suggested fixes powered by Copilot Autofix. Review carefully before merging.