Commit 6e404499 authored by Hiro's avatar Hiro 🏄
Browse files

Sanitize string format before printing

parent 877e9a2e

src/main/java/org/torproject/metrics/onionoo/server/ResponseBuilder.java

+3 −1
Changes for src/main/java/org/torproject/metrics/onionoo/server/ResponseBuilder.java: 3 added lines, 1 removed line.
Original line number Original line Diff line number Diff line
@@ -180,6 +180,9 @@ public class ResponseBuilder { 
  }

  }





  private void write(PrintWriter pw, String format, Object ... args) {

  private void write(PrintWriter pw, String format, Object ... args) {

    if (format.indexOf('%') != -1) {

      format = format.replace("%", "%%");

    }

    String stringToWrite = String.format(format, args);

    String stringToWrite = String.format(format, args);

    this.charsWritten += stringToWrite.length();

    this.charsWritten += stringToWrite.length();

    pw.write(stringToWrite);

    pw.write(stringToWrite);
@@ -306,4 +309,3 @@ public class ResponseBuilder { 
    }

    }

  }

  }

}
 
}