Joerg Hoh created SLING-13360:
---------------------------------

             Summary: all log directives should handle CR/LF escaping
                 Key: SLING-13360
                 URL: https://issues.apache.org/jira/browse/SLING-13360
             Project: Sling
          Issue Type: Improvement
          Components: Engine
    Affects Versions: Engine 2.16.8, Engine 3.0.2
            Reporter: Joerg Hoh


escape the following log directives to remove CR/LF control characters.
 * ParamParameter  ( % \{name}M / %\{name}P ): decoded request-parameter values

 * ContentPathParameter  ( %f : resolved resource path derived from the decoded 
request path
 * RemoteHostParameter  ( %h ): reverse-DNS hostname (defensive)
 * ThreadParameter: thread name (defensive)

(they are not used in the default log configuration)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to