Fix code scanning alerts (log forgery)

Author: bkoelman

src/JsonApiDotNetCore/Middleware/JsonApiMiddleware.cs

@@ -92,7 +92,8 @@ public async Task InvokeAsync(HttpContext httpContext, IControllerResourceMappin
         {
             string timingResults = CodeTimingSessionManager.Current.GetResults();
             string url = httpContext.Request.GetDisplayUrl();
-            logger.LogInformation($"Measurement results for {httpContext.Request.Method} {url}:{Environment.NewLine}{timingResults}");
+            string method = httpContext.Request.Method.Replace(Environment.NewLine, "");
+            logger.LogInformation($"Measurement results for {method} {url}:{Environment.NewLine}{timingResults}");
         }
     }
 

src/JsonApiDotNetCore/Serialization/Request/JsonApiReader.cs

@@ -40,8 +40,9 @@ public JsonApiReader(IJsonApiOptions options, IDocumentAdapter documentAdapter,
         ArgumentGuard.NotNull(httpRequest);
 
         string requestBody = await ReceiveRequestBodyAsync(httpRequest);
+        string method = httpRequest.Method.Replace(Environment.NewLine, "");
 
-        _traceWriter.LogMessage(() => $"Received {httpRequest.Method} request at '{httpRequest.GetEncodedUrl()}' with body: <<{requestBody}>>");
+        _traceWriter.LogMessage(() => $"Received {method} request at '{httpRequest.GetEncodedUrl()}' with body: <<{requestBody}>>");
 
         return GetModel(requestBody);
     }

src/JsonApiDotNetCore/Serialization/Response/JsonApiWriter.cs

@@ -63,7 +63,12 @@ public async Task WriteAsync(object? model, HttpContext httpContext)
         }
 
         _traceWriter.LogMessage(() =>
-            $"Sending {httpContext.Response.StatusCode} response for {httpContext.Request.Method} request at '{httpContext.Request.GetEncodedUrl()}' with body: <<{responseBody}>>");
+        {
+            string method = httpContext.Request.Method.Replace(Environment.NewLine, "");
+            string url = httpContext.Request.GetEncodedUrl();
+
+            return $"Sending {httpContext.Response.StatusCode} response for {method} request at '{url}' with body: <<{responseBody}>>";
+        });
 
         await SendResponseBodyAsync(httpContext.Response, responseBody);
     }