Fix code scanning alert no. 2: Log Injection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
zhinghu · Sep 28, 2024 · d1ccc17 · d1ccc17
1 parent 0131312
commit d1ccc17
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/cc/baka9/catseedlogin/bukkit/Communication.java b/src/main/java/cc/baka9/catseedlogin/bukkit/Communication.java
@@ -80,7 +80,8 @@ private static void handleRequest(Socket socket) {
                 handleKeepLoggedInRequest(playerName, time, sign);
                 break;
             default:
-                CatSeedLogin.instance.getLogger().warning("未知请求类型: " + requestType);
+                String sanitizedRequestType = requestType.replace("\n", "").replace("\r", "");
+                CatSeedLogin.instance.getLogger().warning("未知请求类型: " + sanitizedRequestType);
                 break;
         }
     } catch (IOException e) {