From df68461264c8d6b15533fd5c1cd2d8b376a6090e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maximilian=20Pa=C3=9F?= <22845248+mpass99@users.noreply.github.com> Date: Thu, 3 Feb 2022 14:54:22 +0100 Subject: [PATCH] Sanitize user input in logs. --- internal/runner/nomad_runner.go | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/internal/runner/nomad_runner.go b/internal/runner/nomad_runner.go index f9fc758..c66e8bc 100644 --- a/internal/runner/nomad_runner.go +++ b/internal/runner/nomad_runner.go @@ -4,6 +4,7 @@ import ( "archive/tar" "bytes" "context" + "encoding/base64" "encoding/json" "errors" "fmt" @@ -216,14 +217,16 @@ func createTarArchiveForFiles(filesToCopy []dto.File, w io.Writer) error { if err := tarWriter.WriteHeader(tarHeader(file)); err != nil { err := fmt.Errorf("error writing tar file header: %w", err) log. - WithField("file", file). + WithField("path", base64.StdEncoding.EncodeToString([]byte(file.Path))). + WithField("content", base64.StdEncoding.EncodeToString(file.Content)). Error(err) return err } if _, err := tarWriter.Write(file.ByteContent()); err != nil { err := fmt.Errorf("error writing tar file content: %w", err) log. - WithField("file", file). + WithField("path", base64.StdEncoding.EncodeToString([]byte(file.Path))). + WithField("content", base64.StdEncoding.EncodeToString(file.Content)). Error(err) return err }