chore(TRACEX-641): enrich sanitization to prevent log injection

Author: Robin Gottschalk

tx-backend/src/main/java/org/eclipse/tractusx/traceability/assets/infrastructure/base/irs/OrderRepositoryImpl.java

@@ -149,7 +149,7 @@ public void handleOrderFinishedCallback(String orderId, String batchId, Processi
                         .findFirst();
 
                 if (existingBatch.isPresent()) {
-                    log.info("Found existing batch ID: {} for order ID: {}, no new batch created", batchId, sanitize(orderId));
+                    log.info("Found existing batch ID: {} for order ID: {}, no new batch created", sanitize(batchId), sanitize(orderId));
                 } else {
                     BatchEntity newBatch = BatchEntity.builder()
                             .id(batchId)
@@ -158,7 +158,7 @@ public void handleOrderFinishedCallback(String orderId, String batchId, Processi
                             .build();
                     orderEntity.addBatch(newBatch);
                     updated = true;
-                    log.info("Added new batch with ID: {} and status: {} to order ID: {}", newBatch.getId(), newBatch.getStatus(), sanitize(orderId));
+                    log.info("Added new batch with ID: {} and status: {} to order ID: {}", sanitize(newBatch.getId()), newBatch.getStatus(), sanitize(orderId));
                 }
             }
 

tx-backend/src/main/java/org/eclipse/tractusx/traceability/common/security/Sanitizer.java

@@ -27,6 +27,7 @@ public static String sanitize(String input) {
         if (input == null) {
             return null;
         }
-        return StringUtils.replaceEach(input, new String[]{"\n", "\r"}, new String[]{"", ""});
+        input = input.replaceAll("[^\\w:-]", "");;
+        return input;
     }
 }