fixup! Refactored building/parsing of the JTW tokens

uyuni-project · Jan 24, 2025 · 2242dc8 · 2242dc8
1 parent 62776b5
commit 2242dc8
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/java/code/src/com/suse/manager/webui/controllers/DownloadController.java b/java/code/src/com/suse/manager/webui/controllers/DownloadController.java
@@ -592,8 +592,9 @@ else if (!onlyChannels.contains(channel)) {
                 halt(HttpStatus.SC_BAD_REQUEST, "Token does not specify the organization");
             }
             else if (!ChannelFactory.isAccessibleBy(channel, orgId)) {
-                LOG.info("Forbidden: Token does not provide access to channel {}", channel);
-                halt(HttpStatus.SC_FORBIDDEN, "Token does not provide access to channel %s".formatted(channel));
+                String sanitChannel = StringUtil.sanitizeLogInput(channel);
+                LOG.info("Forbidden: Token does not provide access to channel {}", sanitChannel);
+                halt(HttpStatus.SC_FORBIDDEN, "Token does not provide access to channel %s".formatted(sanitChannel));
             }
         }
         catch (TokenParsingException e) {