Merge pull request #23 from JakubPatkowski/fix-security-alerts

fix: security scanning alerts

Author: JakubPatkowski

src/TodoTaskAPI.API/Controllers/TodoController.cs

@@ -155,7 +155,7 @@ public async Task<ActionResult<ApiResponseDto<IEnumerable<TodoDto>>>> FindTodos(
         try
         {
             _logger.LogInformation("Starting todo search with parameters: ID: {Id}",
-                parameters.Id);
+                LogSanitizer.Sanitize(parameters.Id));
 
             // Call the FindTodosAsync method in the TodoService to retrieve the matching todos
             var todos = await _todoService.FindTodosAsync(parameters);

src/TodoTaskAPI.API/Middleware/RequestLoggingMiddleware.cs

@@ -64,8 +64,8 @@ public async Task InvokeAsync(HttpContext context)
                 // Log the response details, including the elapsed time.
                 _logger.LogInformation(
                      "Request {Method} {Path} completed in {ElapsedMilliseconds}ms with status code {StatusCode}",
-                     context.Request.Method,
-                     context.Request.Path,
+                     LogSanitizer.Sanitize(context.Request.Method),
+                     LogSanitizer.Sanitize(context.Request.Path),
                      stopwatch.ElapsedMilliseconds,
                      context.Response.StatusCode);
             }

src/TodoTaskAPI.Application/Services/TodoService.cs

@@ -117,7 +117,7 @@ public async Task<IEnumerable<TodoDto>> FindTodosAsync(TodoSearchParametersDto p
         try
         {
             _logger.LogInformation("Starting todo search with parameters: ID: {Id}",
-                parameters.Id);
+                LogSanitizer.Sanitize(parameters.Id));
 
             // Validate parameters
             parameters.ValidateParameters();

src/TodoTaskAPI.Infrastructure/Repositories/TodoRepository.cs

@@ -1,10 +1,10 @@
-using System;
-using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore;
 using TodoTaskAPI.Core.Entities;
 using TodoTaskAPI.Core.Interfaces;
 using TodoTaskAPI.Infrastructure.Data;
 using Microsoft.Extensions.Logging;
 using TodoTaskAPI.Core.Exceptions;
+using TodoTaskAPI.Core.Helpers;
 
 namespace TodoTaskAPI.Infrastructure.Repositories;
 
@@ -80,7 +80,7 @@ public async Task<IEnumerable<Todo>> FindTodosAsync(Guid? id = null, string? tit
         }
         catch (Exception ex)
         {
-            _logger.LogError(ex, "Error occurred while searching for todos. ID: {Id}", id);
+            _logger.LogError(ex, "Error occurred while searching for todos. ID: {Id}", LogSanitizer.Sanitize(id));
             throw;
         }
     }