Skip to content

fix: remove duplicate String format - #1048

Merged
ndr-brt merged 1 commit into
eclipse-edc:mainfrom
project-construct-x:fix/duplicate-string-format
Jul 30, 2026
Merged

fix: remove duplicate String format#1048
ndr-brt merged 1 commit into
eclipse-edc:mainfrom
project-construct-x:fix/duplicate-string-format

Conversation

@mhellmeier

Copy link
Copy Markdown
Contributor

What this PR changes/adds

Remove duplicate String.format in CredentialProfile.java.

Why it does that

To prevent an externally controlled format string due to duplicate parsing (e.g., when using a %). The issue was raised as a high security issue by CodeQL.

Further notes

./.

Who will sponsor this feature?

./.

Linked Issue(s)

Closes #1044

@mhellmeier
mhellmeier requested a review from a team as a code owner July 27, 2026 08:30
@github-actions

Copy link
Copy Markdown
Contributor

We are always happy to welcome new contributors ❤️ To make things easier for everyone, please make sure to follow our contributors manual, check if you have already signed the ECA, and relate this pull request to an existing issue or discussion.

@paullatzelsperger

Copy link
Copy Markdown
Member

@mhellmeier the change per se is fine, I approved it, but you seem to have compile errors. maybe rebasing onto main is necessary.

@ndr-brt ndr-brt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you can rebase against main to get green checks

@mhellmeier
mhellmeier force-pushed the fix/duplicate-string-format branch from 5281178 to b6a9d78 Compare July 30, 2026 07:04
@mhellmeier

Copy link
Copy Markdown
Contributor Author

Rebased against main, ready to be merged @ndr-brt & @paullatzelsperger

@paullatzelsperger paullatzelsperger added the bug Something isn't working label Jul 30, 2026
@ndr-brt
ndr-brt merged commit eea930c into eclipse-edc:main Jul 30, 2026
28 of 30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Use of externally-controlled format string

3 participants