photoprism/pkg/txt/log.go
Michael Mayer f5a8c5a45d Auth: Session and ACL enhancements #98 #1746
Signed-off-by: Michael Mayer <michael@photoprism.app>
2022-09-28 09:01:17 +02:00

45 lines
914 B
Go

package txt
import (
"fmt"
"strings"
"unicode"
)
// LogParam sanitizes strings created from user input in response to the log4j debacle.
func LogParam(s string) string {
if len(s) > ClipLongName || strings.Contains(s, "ldap:/") {
return "?"
}
// Trim quotes, tabs, and newline characters.
s = strings.Trim(s, "'\"“`\t\n\r")
// Remove non-printable and other potentially problematic characters.
s = strings.Map(func(r rune) rune {
if !unicode.IsPrint(r) {
return -1
}
switch r {
case '`', '"':
return '\''
case '~', '\\', '|', '$', '<', '>', '{', '}', '∅':
return '?'
default:
return r
}
}, s)
// Empty?
if s == "" || strings.ContainsAny(s, " ") {
return fmt.Sprintf("'%s'", s)
}
return s
}
// LogParamLower sanitizes strings created from user input and converts them to lowercase.
func LogParamLower(s string) string {
return LogParam(strings.ToLower(s))
}