s/Replace/ReplaceAll/ in LogInjectionGood.go

github · Sep 19, 2023 · 11218f7 · 11218f7
1 parent 8354439
commit 11218f7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/go/ql/src/Security/CWE-117/LogInjectionGood.go b/go/ql/src/Security/CWE-117/LogInjectionGood.go
@@ -9,7 +9,7 @@ import (
 // GOOD: The user-provided value is escaped before being written to the log.
 func handlerGood(req *http.Request) {
 	username := req.URL.Query()["username"][0]
-	escapedUsername := strings.Replace(username, "\n", "", -1)
-	escapedUsername = strings.Replace(escapedUsername, "\r", "", -1)
+	escapedUsername := strings.ReplaceAll(username, "\n", "", -1)
+	escapedUsername = strings.ReplaceAll(escapedUsername, "\r", "", -1)
 	log.Printf("user %s logged in.\n", escapedUsername)
 }