From d85226f7d06e0ba94be43489915a553036194de0 Mon Sep 17 00:00:00 2001
From: acalcutt <acalcutt@techidiots.net>
Date: Sat, 4 Jan 2025 23:45:31 -0500
Subject: [PATCH] codeql

---
 src/serve_data.js | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/serve_data.js b/src/serve_data.js
index d4b5208..75cc667 100644
--- a/src/serve_data.js
+++ b/src/serve_data.js
@@ -165,7 +165,11 @@ export const serve_data = {
       try {
         if (verbose) {
           console.log(
-            `Handling elevation request for: /data/${req.params.id}/elevation/${req.params.z}/${req.params.x}/${req.params.y}`,
+            `Handling elevation request for: /data/%s/elevation/%s/%s/%s`,
+            String(req.params.id).replace(/\n|\r/g, ''),
+            String(req.params.z).replace(/\n|\r/g, ''),
+            String(req.params.x).replace(/\n|\r/g, ''),
+            String(req.params.y).replace(/\n|\r/g, ''),
           );
         }
         const item = repo?.[req.params.id];
@@ -313,7 +317,8 @@ export const serve_data = {
     app.get('/:id.json', (req, res) => {
       if (verbose) {
         console.log(
-          `Handling tilejson request for: /data/${req.params.id}.json`,
+          `Handling tilejson request for: /data/%s.json`,
+          String(req.params.id).replace(/\n|\r/g, ''),
         );
       }
       const item = repo[req.params.id];