🔒️fix Potentially unsafe quoting

SAP · Jul 23, 2024 · 4573b07 · 4573b07
1 parent 9e56601
commit 4573b07
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/proxy/wasm/cloud-active-defense.wasm b/proxy/wasm/cloud-active-defense.wasm
diff --git a/proxy/wasm/main.go b/proxy/wasm/main.go
@@ -131,7 +131,7 @@ func (ctx *pluginContext) OnTick() {
       {":method", "POST"}, {":authority", "configmanager"}, {":path", "/blocklist"}, {"accept", "*/*"},
       {"Content-Type", "application/json"},
     }
-    if _, err := proxywasm.DispatchHttpCall("configmanager", requestHeadersBlocklist, []byte("{\"blocklist\":" + string(jsonUpdateBlocklist) + ",\"throttle\":" + string(jsonUpdateThrottleList) + "}"), nil, 5000, callBackSetBlocklist); err != nil {
+    if _, err := proxywasm.DispatchHttpCall("configmanager", requestHeadersBlocklist, []byte(strings.ReplaceAll("{\"blocklist\":" + string(jsonUpdateBlocklist) + ",\"throttle\":" + string(jsonUpdateThrottleList) + "}", `\`, `\\`)), nil, 5000, callBackSetBlocklist); err != nil {
       proxywasm.LogCriticalf("dispatch httpcall failed: %v", err)
     }
     updateBlocklist = []map[string]string{}