Merge pull request #22 from arpitjain099/alert-autofix-8

Fix code scanning alert no. 8: Reflected server-side cross-site scripting
arpitjain099 · Oct 20, 2024 · 23fa24b · 23fa24b
2 parents 015da9a + 61d6b9d
commit 23fa24b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/End_to_end_Solutions/AOAISearchDemo/app/data/app.py b/End_to_end_Solutions/AOAISearchDemo/app/data/app.py
@@ -85,8 +85,8 @@ def get_chat_session(user_id: str, conversation_id: str):
         properties = logger.get_updated_properties(addl_dim)
 
         if session is None:
-            logger.info(f"get-chat-session: session with conversation_id {conversation_id} not found", extra=properties)
-            return Response(response=f"Chat session with conversation_id {conversation_id} not found.", status=404)
+            logger.info(f"get-chat-session: session with conversation_id {html.escape(conversation_id)} not found", extra=properties)
+            return Response(response=f"Chat session with conversation_id {html.escape(conversation_id)} not found.", status=404)
         else:
             logger.info("get-chat-session: session found", extra=properties)
             return Response(response=json.dumps(session.to_item()), status=200)