title: CloudLoggerFactory's Sanitized Logger shows CRLF Injection vulnerability in Veracode Scan
body: <p>We are using S4 SDK's CloudLoggerFactory to log exceptions throughout our application. For a class "SampleClass", we create a logger like this:</p>
  
  <pre><code>private static final Logger logger = CloudLoggerFactory.getSanitizedLogger(SampleClass.class, "(END)");
  </code></pre>
  
  <p>and call it for an Exception e:</p>
  
  <pre><code>    logger.error(e.getMessage(), e);
  </code></pre>
  
  <p>A Veracode scan has shown this logging line to be vulnerable to CLRF Injection. To my understanding, the getSanitizedLogger in conjunction with the "(END)" argument should solve this issue. Can you provide some insight into this matter, please?</p>
  
  <p>Thank you in advance!</p>