fluent / fluent-plugin-opensearch / 35323830701

93%

push

github

out_opensearch: escape a customize_template value inside a string (#194)

Before: get_custom_template put each customize_template value into the
template text with a plain gsub. A value can come from a tag or a record
field, so a `"` in it ended the JSON string it was in, and the rest was
read as extra template keys. A log sender could add index_patterns,
order and aliases, and fluentd then sent that index template to the
server with its own credentials. gsub also read backslash sequences
such as \0 in the value.

After: if the key is inside a JSON string, the value is escaped, so it
can only become one string. If the key is anywhere else, the value is
still a piece of JSON, like a whole settings object. The block form of
gsub stops gsub from reading backslash sequences in the value.

Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>
Co-authored-by: Claude <noreply@anthropic.com>

6 of 6 new or added lines in 1 file covered. (100.0%)

1204 of 1296 relevant lines covered (92.9%)

315.7 hits per line