Uruk 2c0ed076d5 fix(security): prevent log injection in WebSocket message logging ...

Sanitize WebSocket messages before logging to prevent log injection attacks.
User-controlled data from WebSocket messages could contain newline characters
that allow forging fake log entries.

Changes:
- Convert message object to JSON string and remove newlines/carriage returns
- Use format specifier (%s) for safe string interpolation
- Applied fix to providers/WebSocketProvider.tsx and hooks/useWebsockets.ts

Resolves CodeQL security alert js/log-injection

Co-authored-by: GitHub Copilot Autofix <noreply@github.com>

2025-11-07 22:35:53 +01:00

..

Downloads

fix: download handling of "other" media

2025-09-30 10:39:56 +02:00

DownloadProvider.tsx

fix: download handling of "other" media

2025-09-30 10:39:56 +02:00

JellyfinProvider.tsx

chore: version

2025-10-01 09:12:34 +02:00

PlaySettingsProvider.tsx

refactor: Feature/offline mode rework (#859)

2025-08-15 21:34:22 +02:00

WebSocketProvider.tsx

fix(security): prevent log injection in WebSocket message logging

2025-11-07 22:35:53 +01:00