Fix code scanning alert no. 538: Log Injection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
pagopa · Sep 26, 2024 · e5548b3 · e5548b3
1 parent 7e91c31
commit e5548b3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/it/gov/pagopa/payments/controller/receipt/impl/PaymentsController.java b/src/main/java/it/gov/pagopa/payments/controller/receipt/impl/PaymentsController.java
@@ -36,13 +36,14 @@ public PaymentsController(PaymentsService paymentsService) {
  public ResponseEntity<String> getReceiptByIUV(
  String organizationFiscalCode, String iuv, String segregationCodes) {
  String sanitizedOrganizationFiscalCode = sanitizeInput(organizationFiscalCode);
+ String sanitizedIuv = sanitizeInput(iuv);
  log.debug(
  String.format(
  LOG_BASE_HEADER_INFO,
  "GET",
  String.format(LOG_BASE_PARAMS_DETAIL, sanitizedOrganizationFiscalCode)
  + "; iuv= "
- + iuv
+ + sanitizedIuv
  + "; validSegregationCodes= "
  + segregationCodes));