Bertrand Delacretaz created SLING-9872:
------------------------------------------

             Summary: Avoid logging unsanitized input
                 Key: SLING-9872
                 URL: https://issues.apache.org/jira/browse/SLING-9872
             Project: Sling
          Issue Type: Bug
          Components: GraphQL
    Affects Versions: GraphQL Core 0.0.6
            Reporter: Bertrand Delacretaz
            Assignee: Bertrand Delacretaz
             Fix For: GraphQL Core 0.0.8


As flagged by SonarCloud in 
[https://github.com/apache/sling-org-apache-sling-graphql-core/pull/13] we are 
logging data provided by clients (the GraphQL query text in this case) in some 
places.

This should be avoided, or the data sanitized before logging.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to