Fix code scanning alert no. 717: Log Injection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
pagopa · Oct 25, 2024 · fd599f3 · fd599f3
1 parent 36ead2c
commit fd599f3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/it/gov/pagopa/fdr/service/psps/PspsService.java b/src/main/java/it/gov/pagopa/fdr/service/psps/PspsService.java
@@ -338,8 +338,9 @@ public void publishByFdr(String action, String pspId, String fdr, boolean intern
       .thenAccept(value -> {
           log.info("End of saveOnStorage storage on BlobStorage of FDR payment entities");
           fdrEntity.delete();
+          String sanitizedFdr = fdr.replace("\n", "").replace("\r", "");
           log.infof(
-                  "Delete FdrPaymentInsertEntity by fdr[%s], pspId[%s]", fdrEntity.getRevision(), fdr, pspId);
+                  "Delete FdrPaymentInsertEntity by fdr[%s], pspId[%s]", fdrEntity.getRevision(), sanitizedFdr, pspId);
           FdrPaymentInsertEntity.deleteByFdrAndPspId(fdr, pspId);
           log.info("End delete deleteByFdrAndPspId");
           this.addToConversionQueue(internalPublish, fdrEntity);