From a16dcd5e56a39c82ed0ceee6f5602c6a915140cd Mon Sep 17 00:00:00 2001 From: Tobias Gesellchen Date: Tue, 2 Jun 2026 22:56:36 +0200 Subject: [PATCH] Potential fix for pull request finding 'CodeQL / Log entries created from user input' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- pkg/client/websocket.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pkg/client/websocket.go b/pkg/client/websocket.go index 36be370..6ea8937 100644 --- a/pkg/client/websocket.go +++ b/pkg/client/websocket.go @@ -566,7 +566,12 @@ func (ws *WebSocketClient) handleEvent(event *models.WebSocketEvent) { // Log the actual unmodeled element names (e.g. nowSelectionUpdated) // rather than an empty list; skip frames that carry no child events. if names := event.UnknownEventNames(); len(names) > 0 { - ws.logger.Printf("Received unhandled event types: %v", names) + sanitizedNames := make([]string, 0, len(names)) + for _, name := range names { + sanitizedNames = append(sanitizedNames, sanitizeLog(name)) + } + + ws.logger.Printf("Received unhandled event types: %v", sanitizedNames) } } }