fix(jans-auth-server): corrected log vulnerability

#805
JanssenProject · Mar 21, 2022 · 1000a60 · 1000a60
1 parent d71cbe8
commit 1000a60
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...-auth-server/server/src/main/java/io/jans/as/server/service/stat/StatResponseService.java b/...-auth-server/server/src/main/java/io/jans/as/server/service/stat/StatResponseService.java
@@ -48,7 +48,7 @@ public StatResponse buildResponse(List<String> months) {
         final StatResponse cachedResponse = responseCache.getIfPresent(cacheKey);
         if (cachedResponse != null) {
             if (log.isTraceEnabled()) {
-                log.trace("Get stat response from cache for: {}", cacheKey);
+                log.trace("Get stat response from cache for: {}", escapeLog(cacheKey));
             }
             return cachedResponse;
         }