[SLING-9872] Avoid logging unsanitized input

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: GraphQL Core 0.0.6
• Fix Version/s: GraphQL Core 0.0.8
• Component/s: GraphQL
• Assignee: Bertrand Delacretaz
• Reporter: Bertrand Delacretaz
• Created: 03/Nov/20 09:34
• Updated: 09/Nov/20 10:49
• Resolved: 03/Nov/20 11:39

Description

As flagged by SonarCloud in https://github.com/apache/sling-org-apache-sling-graphql-core/pull/13 we are logging data provided by clients (the GraphQL query text in this case) in some places.

This should be avoided, or the data sanitized before logging.

Issue Links

• is caused by: SLING-9870 NullPointerException, in case Locations are null in a GraphQL error response