[SELC-6155] bugfix: Fixed log injection into getFiles

pagopa · Dec 9, 2024 · abe2644 · abe2644
1 parent 80c3ec3
commit abe2644
Showing 6 changed files with 9 additions and 8 deletions.
diff --git a/libs/onboarding-sdk-azure-storage/pom.xml b/libs/onboarding-sdk-azure-storage/pom.xml
@@ -6,7 +6,7 @@
   <parent>
     <groupId>it.pagopa.selfcare</groupId>
     <artifactId>onboarding-sdk-pom</artifactId>
-    <version>0.6.0</version>
+    <version>0.6.1</version>
     <relativePath>../onboarding-sdk-pom</relativePath>
   </parent>
 

diff --git a/...k-azure-storage/src/main/java/it/pagopa/selfcare/azurestorage/AzureBlobClientDefault.java b/...k-azure-storage/src/main/java/it/pagopa/selfcare/azurestorage/AzureBlobClientDefault.java
@@ -158,13 +158,14 @@ public BlobProperties getProperties(String filePath) {
     @Override
     public List<String> getFiles(String path) {
         log.debug("START - getFiles by given path: {}", path);
+        String sanitizePath = StringUtils.replace(path, "\n", StringUtils.EMPTY).replace("\r", StringUtils.EMPTY);
         List<String> listOfResource = new ArrayList<>();
         final BlobContainerClient blobContainer = blobClient.getBlobContainerClient(containerName);
 
-        if (StringUtils.isNotEmpty(path)) {
+        if (StringUtils.isNotEmpty(sanitizePath)) {
 
             ListBlobsOptions options = new ListBlobsOptions()
-                .setPrefix(path)
+                .setPrefix(sanitizePath)
                 .setDetails(new BlobListDetails()
                     .setRetrieveDeletedBlobs(true)
                     .setRetrieveSnapshots(true));

diff --git a/libs/onboarding-sdk-common/pom.xml b/libs/onboarding-sdk-common/pom.xml
@@ -4,7 +4,7 @@
     <parent>
         <groupId>it.pagopa.selfcare</groupId>
         <artifactId>onboarding-sdk-pom</artifactId>
-        <version>0.6.0</version>
+        <version>0.6.1</version>
         <relativePath>../onboarding-sdk-pom</relativePath>
     </parent>
     <artifactId>onboarding-sdk-common</artifactId>

diff --git a/libs/onboarding-sdk-crypto/pom.xml b/libs/onboarding-sdk-crypto/pom.xml
@@ -4,7 +4,7 @@
     <parent>
         <groupId>it.pagopa.selfcare</groupId>
         <artifactId>onboarding-sdk-pom</artifactId>
-        <version>0.6.0</version>
+        <version>0.6.1</version>
         <relativePath>../onboarding-sdk-pom</relativePath>
     </parent>
     <artifactId>onboarding-sdk-crypto</artifactId>

diff --git a/libs/onboarding-sdk-pom/pom.xml b/libs/onboarding-sdk-pom/pom.xml
@@ -5,7 +5,7 @@
     <artifactId>onboarding-sdk-pom</artifactId>
     <packaging>pom</packaging>
     <name>onboarding-sdk-pom</name>
-    <version>0.6.0</version>
+    <version>0.6.1</version>
 
     <properties>
         <maven.compiler.source>17</maven.compiler.source>

diff --git a/libs/onboarding-sdk-product/pom.xml b/libs/onboarding-sdk-product/pom.xml
@@ -4,12 +4,12 @@
     <parent>
         <groupId>it.pagopa.selfcare</groupId>
         <artifactId>onboarding-sdk-pom</artifactId>
-        <version>0.6.0</version>
+        <version>0.6.1</version>
         <relativePath>../onboarding-sdk-pom</relativePath>
     </parent>
     <artifactId>onboarding-sdk-product</artifactId>
     <name>onboarding-sdk-product</name>
-    <version>0.6.0</version>
+    <version>0.6.1</version>
 
     <properties>
         <jackson.version>2.15.2</jackson.version>