Fix code scanning alert no. 537: Log Injection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
pagopa · Sep 25, 2024 · e2a3243 · e2a3243
1 parent da4e468
commit e2a3243
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/it/gov/pagopa/payments/controller/receipt/impl/PaymentsController.java b/src/main/java/it/gov/pagopa/payments/controller/receipt/impl/PaymentsController.java
@@ -35,12 +35,12 @@ public PaymentsController(PaymentsService paymentsService) {
   @Override
   public ResponseEntity<String> getReceiptByIUV(
       String organizationFiscalCode, String iuv, String segregationCodes) {
+    String sanitizedOrganizationFiscalCode = sanitizeInput(organizationFiscalCode);
     log.debug(
         String.format(
             LOG_BASE_HEADER_INFO,
             "GET",
-            "getReceiptByIUV",
-            String.format(LOG_BASE_PARAMS_DETAIL, organizationFiscalCode)
+            String.format(LOG_BASE_PARAMS_DETAIL, sanitizedOrganizationFiscalCode)
                 + "; iuv= "
                 + iuv
                 + "; validSegregationCodes= "