Fix code scanning alert no. 12: Log entries created from user input

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
neozhu · Dec 15, 2024 · e230e98 · e230e98
1 parent 77c7c60
commit e230e98
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/CleanAspire.Api/IdentityApiAdditionalEndpointsExtensions.cs b/src/CleanAspire.Api/IdentityApiAdditionalEndpointsExtensions.cs
@@ -155,7 +155,9 @@ public static IEndpointRouteBuilder MapIdentityApiAdditionalEndpoints<TUser>(thi
                 {
                     return CreateValidationProblem(result);
                 }
-                logger.LogInformation("User signup successful. Email: {Email}, TenantId: {TenantId}", request.Email, request.TenantId);
+                var sanitizedEmail = request.Email.Replace(Environment.NewLine, "").Replace("\n", "").Replace("\r", "");
+                var sanitizedTenantId = request.TenantId.Replace(Environment.NewLine, "").Replace("\n", "").Replace("\r", "");
+                logger.LogInformation("User signup successful. Email: {Email}, TenantId: {TenantId}", sanitizedEmail, sanitizedTenantId);
                 await SendConfirmationEmailAsync(user, userManager, context, request.Email);
                 return TypedResults.Created();
             })