Skip to content

Commit 66ef85c

Browse files
Potential fix for code scanning alert no. 47: Log entries created from user input
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 6640f47 commit 66ef85c

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/api/Elastic.Documentation.Api.Core/AskAi/AskAiUsecase.cs

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ public async Task<Stream> AskAi(AskAiRequest askAiRequest, Cancel ctx)
3030
};
3131
var inputMessagesJson = JsonSerializer.Serialize(inputMessages, ApiJsonContext.Default.InputMessageArray);
3232
_ = activity?.SetTag("gen_ai.input.messages", inputMessagesJson);
33-
logger.LogInformation("AskAI input message: <{ask_ai.input.message}>", askAiRequest.Message);
33+
var sanitizedMessage = askAiRequest.Message?.Replace("\r", "").Replace("\n", "");
34+
logger.LogInformation("AskAI input message: <{ask_ai.input.message}>", sanitizedMessage);
3435
logger.LogInformation("Streaming AskAI response");
3536
var rawStream = await askAiGateway.AskAi(askAiRequest, ctx);
3637
// The stream transformer will handle disposing the activity when streaming completes

0 commit comments

Comments
 (0)