Skip to content

Escape Unicode null character before parsing security report

Mehmet Emin INAC requested to merge minac_417916_handle_unicode_null_characters into master

What does this MR do and why?

As the Unicode null character(\u0000) can not be stored by PostgreSQL, we are escaping it while parsing the security report artifacts by this change. We will be notifying the user with a warning message shown on the "pipeline security tab" if the artifact produced by the analyzer contains a Unicode null character.

Related to Vulnerability report with Unicode NULL (U+0000)... (#417916 - closed).

Screenshots or screen recordings

Before After
Screenshot_2023-12-19_at_12.30.50 Screenshot_2023-12-19_at_12.34.32

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Mehmet Emin INAC

Merge request reports