Skip to content

security: normalize logging records - #1

Merged
chen21019 merged 1 commit into
mainfrom
security/log-record-injection-20260826
Aug 26, 2026
Merged

security: normalize logging records#1
chen21019 merged 1 commit into
mainfrom
security/log-record-injection-20260826

Conversation

@chen21019

Copy link
Copy Markdown

Result

Render each logging call once, remove CR characters, and replace embedded LF characters before handing the record to the standard logger. Formatting behavior is preserved while injected values can no longer forge a second record.

Verification

  • go test ./internal/logging
  • git diff --check

@chen21019
chen21019 requested a review from a team as a code owner August 26, 2026 06:44
@chen21019
chen21019 merged commit fd089d2 into main Aug 26, 2026
4 checks passed
@chen21019
chen21019 deleted the security/log-record-injection-20260826 branch August 26, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant