Function sanitizeForLog

pkg/cli/mcp_server_http.go:19–24

sanitizeForLog removes newline and carriage return characters from user input to prevent log injection attacks where malicious users could forge log entries.

(input string)

// sanitizeForLog removes newline and carriage return characters from user input
// to prevent log injection attacks where malicious users could forge log entries.
func sanitizeForLog(input string) string {
	// Remove both \n and \r to prevent log injection
	sanitized := strings.ReplaceAll(input, "\n", "")
	sanitized = strings.ReplaceAll(sanitized, "\r", "")
	return sanitized
}

// responseWriter wraps http.ResponseWriter to capture the status code.
type responseWriter struct {