fluent / fluent-plugin-opensearch / 35065501899

93%

main: 93%

Build Type

Pull #194

github

Committed by kenhys

Commit Message

out_opensearch: escape customize_template values as JSON strings

Before: get_custom_template put each customize_template value into the
template text with a plain gsub. A value can be expanded from a tag or
a record field, so a `"` in it closed the JSON string it sat in and the
rest was read as more template keys. A log sender could add
index_patterns, order and aliases and have fluentd PUT that index
template with its own credentials. gsub also read backslash sequences
such as \0 in the replacement.

After: the value is escaped as JSON string content before it is
substituted, and the block form of gsub keeps the replacement literal.
A value can only become one string in the template.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>

Pull Request Pull Request #194: out_opensearch: escape customize_template values as JSON strings

Coverage Stats

8 of 8 new or added lines in 1 file covered. (100.0%)

6 existing lines in 1 file now uncovered.

1198 of 1290 relevant lines covered (92.87%)

312.91 hits per line