Skip to content

Avoid the use of externally-controlled format string in logs#202

Merged
jaydeluca merged 1 commit intoopen-telemetry:mainfrom
jaydeluca:fix-logger
Apr 6, 2026
Merged

Avoid the use of externally-controlled format string in logs#202
jaydeluca merged 1 commit intoopen-telemetry:mainfrom
jaydeluca:fix-logger

Conversation

@jaydeluca
Copy link
Copy Markdown
Member

Addressing some codeql alerts

Functions like the Node.js standard library function util.format accept a format string that is used to format the remaining arguments by providing inline format specifiers. If the format string contains unsanitized input from an untrusted source, then that string may contain unexpected format specifiers that cause garbled output.

@jaydeluca jaydeluca requested review from a team as code owners April 2, 2026 15:16
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 2, 2026

Deploy Preview for otel-ecosystem-explorer ready!

Name Link
🔨 Latest commit 19cdb1c
🔍 Latest deploy log https://app.netlify.com/projects/otel-ecosystem-explorer/deploys/69ce8836e1ff8d0008f26286
😎 Deploy Preview https://deploy-preview-202--otel-ecosystem-explorer.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@jaydeluca jaydeluca merged commit 06c421d into open-telemetry:main Apr 6, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants