RHINENG-12951: fix CWE-918

RedHatInsights · Oct 4, 2024 · 5328986 · 5328986
1 parent 4698cdd
commit 5328986
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/turnpike/controllers/admin.go b/turnpike/controllers/admin.go
@@ -9,6 +9,7 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"net/url"
 	"regexp"
 	"strconv"
 	"time"
@@ -293,7 +294,7 @@ func GetManagerPprof(c *gin.Context) {
 func pprofHandler(c *gin.Context, address string) {
 	query := c.Request.URL.RawQuery
 	param := c.Param("param")
-	data, err := getPprof(address, param, query)
+	data, err := getPprof(address, url.QueryEscape(param), query)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"err": err.Error()})
 		return