Conversation
|
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| securityLogger.warn("Failed login attempt - Username: {}, IP: {}, Reason: {}", | ||
| safeUsername, clientIp, reason); |
Check notice
Code scanning / SonarQube
Logging should not be vulnerable to injection attacks Low
| MDC.put(MDC_KEY_IP, clientIp); | ||
| MDC.put(MDC_KEY_EVENT, EVENT_SUCCESSFUL_LOGIN); | ||
|
|
||
| securityLogger.info("Successful login - Username: {}, IP: {}", username, clientIp); |
Check notice
Code scanning / SonarQube
Logging should not be vulnerable to injection attacks Low
| MDC.put(MDC_KEY_IP, clientIp); | ||
| MDC.put(MDC_KEY_EVENT, EVENT_SQL_QUERY); | ||
|
|
||
| sqlLogger.info("SQL query executed - Query: {}, IP: {}", sanitizeQuery(query), clientIp); |
Check notice
Code scanning / SonarQube
Logging should not be vulnerable to injection attacks Low
| public static void logSqlQuery(String query) { | ||
| MDC.put(MDC_KEY_EVENT, EVENT_SQL_QUERY); | ||
|
|
||
| sqlLogger.info("SQL query executed - Query: {}", sanitizeQuery(query)); |
Check notice
Code scanning / SonarQube
Logging should not be vulnerable to injection attacks Low
| fileLogger.info("File access - File: {}, Operation: {}, IP: {}", | ||
| sanitizeFileName(fileName), operation, clientIp); |
Check notice
Code scanning / SonarQube
Logging should not be vulnerable to injection attacks Low
1 participant
No description provided.