Skip to content

Commit

Permalink
Update Logging_Cheat_Sheet.md ampersand removal (#1593)
Browse files Browse the repository at this point in the history
Updating wording to remove informal ampersand.
  • Loading branch information
ff00ff-security authored Jan 17, 2025
1 parent 904b167 commit 380201f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cheatsheets/Logging_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -220,7 +220,7 @@ If your development framework supports suitable logging mechanisms, use or build

Document the interface referencing the organisation-specific event classification and description syntax requirements.

If possible create this log handler as a standard module that can be thoroughly tested, deployed in multiple applications, and added to a list of approved & recommended modules.
If possible create this log handler as a standard module that can be thoroughly tested, deployed in multiple applications, and added to a list of approved and recommended modules.

- Perform input validation on event data from other trust zones to ensure it is in the correct format (and consider alerting and not logging if there is an input validation failure)
- Perform sanitization on all event data to prevent log injection attacks e.g. carriage return (CR), line feed (LF) and delimiter characters (and optionally to remove sensitive data)
Expand Down

0 comments on commit 380201f

Please sign in to comment.