From edf68f2e6f2df1d7ecccefb6dfe9143ef9cdbaa0 Mon Sep 17 00:00:00 2001 From: Akshay Hosur <107408187+akshay-online@users.noreply.github.com> Date: Fri, 24 Jan 2025 21:37:10 +0530 Subject: [PATCH] Potential fix for code scanning alert no. 6: Information exposure through transmitted data Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- src/ADOGenerator/Services/ProjectService.cs | 24 ++++++++++++++++++++- 1 file changed, 23 insertions(+), 1 deletion(-) diff --git a/src/ADOGenerator/Services/ProjectService.cs b/src/ADOGenerator/Services/ProjectService.cs index 3aba47b..8e35e22 100644 --- a/src/ADOGenerator/Services/ProjectService.cs +++ b/src/ADOGenerator/Services/ProjectService.cs @@ -2866,13 +2866,35 @@ public static class Utility public static string SanitizeJson(string json) { // Implement sanitization logic to remove or mask sensitive information - // For example, remove password fields var jsonObject = JObject.Parse(json); + + // Mask password fields if (jsonObject["password"] != null) { jsonObject["password"] = "****"; } + + // Mask GitUserPassword fields + if (jsonObject["GitUserPassword"] != null) + { + jsonObject["GitUserPassword"] = "****"; + } + + // Mask BikeSharing360password fields + if (jsonObject["BikeSharing360password"] != null) + { + jsonObject["BikeSharing360password"] = "****"; + } + + // Mask ContosoPassword fields + if (jsonObject["ContosoPassword"] != null) + { + jsonObject["ContosoPassword"] = "****"; + } + + // Mask other sensitive fields as needed // Add more sanitization logic as needed + return jsonObject.ToString(); } }