ulixee / unblocked

A suite of tools for protecting the web's open knowledge.
MIT License
130 stars 12 forks source link

Log Forging issues fix in createHttpRequestHandler.ts #84

Closed Mobb-Fixer closed 6 months ago

Mobb-Fixer commented 7 months ago

Issue description Log Forging allows attackers to manipulate log files by injecting malicious content. This can be used to obfuscate attack traces or forge log entries to conceal unauthorized activities. More info from OWASP: https://owasp.org/www-community/attacks/Log_Injection

Fix technique Implement proper input sanitization to remove new lines for values going to the log.