hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix unsanitized -> sanitized typo, and don't add a new variable just to remove newlines

Browse Source
This commit is contained in:
erik-krogh
2024-04-03 09:19:18 +02:00
parent 1f27eb3658
commit ec32bdce63
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ruby/ql/src/queries/security/cwe-117/examples/log_injection_good.rb
View File

@@ -5,9 +5,8 @@ class UsersController < ApplicationController
logger = Logger.new STDOUT
username = params[:username]
# GOOD: log message constructed with unsanitized user input
sanitized_username = username.gsub("\n", "")
logger.info "attempting to login user: " + sanitized_username
# GOOD: log message constructed with sanitized user input
logger.info "attempting to login user: " + sanitized_username.gsub("\n", "")
# ... login logic ...
end