diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2017-03-02 16:32:21 +1000 |
|---|---|---|
| committer | Fraser Tweedale <ftweedal@redhat.com> | 2017-04-19 11:14:59 +1000 |
| commit | 786d40f231f3636db381a835ce78904362ea72d0 (patch) | |
| tree | 1228907d6426c8d01be0515f120fd98222633d59 /base/java-tools/src | |
| parent | 749c137b59a9725a4cacdcd191b7e931303981df (diff) | |
| download | pki-786d40f231f3636db381a835ce78904362ea72d0.tar.gz pki-786d40f231f3636db381a835ce78904362ea72d0.tar.xz pki-786d40f231f3636db381a835ce78904362ea72d0.zip | |
CMS.getLogMessage: escape format elements in arguments
CMS.getLogMessage performs message formatting via MessageFormat,
then the message gets logged via a Logger. The Logger also performs
message formatting via MessageFormat. If the formatted log message
contains '{' or '}' (e.g. if it contains JSON) the MessageFormat
implementation interprets these as FormatElement delimiters and
parsing fails.
Update CMS.getLogMessage() to scan arguments for unsafe characters
and if found, escape the whole message so that subsequent logging
will succeed.
Part of: https://pagure.io/dogtagpki/issue/1359
Diffstat (limited to 'base/java-tools/src')
0 files changed, 0 insertions, 0 deletions