From bc5e9fbe1e22ff87a4b277cb56605a46a10e561a Mon Sep 17 00:00:00 2001 From: jamesread Date: Tue, 10 Mar 2026 23:27:09 +0000 Subject: [PATCH] security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection --- service/internal/executor/arguments.go | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/service/internal/executor/arguments.go b/service/internal/executor/arguments.go index 655ecc4..a73a0d7 100644 --- a/service/internal/executor/arguments.go +++ b/service/internal/executor/arguments.go @@ -250,13 +250,10 @@ func typecheckChoiceEntity(value string, arg *config.ActionArgument) error { func typeSafetyCheckEmail(value string) error { _, err := mail.ParseAddress(value) - - log.Errorf("Email check: %v, %v", err, value) - if err != nil { + log.WithField("type", "email").Debugf("Email argument type check failed") return err } - return nil }