From ce49e1c986b7d1bed15ed54c9fa34bc5cc4392f5 Mon Sep 17 00:00:00 2001
From: Mihir Gore <133626129+mihirgt@users.noreply.github.com>
Date: Tue, 19 Dec 2023 10:36:59 +0530
Subject: [PATCH] Move logs to debug (#444)

Co-authored-by: mihir gore <mihir@mihirs-MacBook-Pro.local>
---
 owasp-suppressions.xml                               |  9 +++++++++
 .../utils/http/HttpSemanticConventionUtils.java      | 12 ++++++------
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml
index 1244aa6d..5a92a2ec 100644
--- a/owasp-suppressions.xml
+++ b/owasp-suppressions.xml
@@ -106,4 +106,13 @@
     <packageUrl regex="true">^pkg:maven/io\.netty/netty.*@.*$</packageUrl>
     <vulnerabilityName>CVE-2023-44487</vulnerabilityName>
   </suppress>
+  <suppress until="2023-12-31Z">
+    <notes><![CDATA[
+   This CVE (rapid RST) is already mitigated as our servers aren't directly exposed, but it's also
+   addressed in 1.59.1, which the CVE doesn't reflect (not all grpc impls versions are exactly aligned).
+   Ref: https://github.com/grpc/grpc-java/pull/10675
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*@.*$</packageUrl>
+    <cve>CVE-2023-44487</cve>
+  </suppress>
 </suppressions>
\ No newline at end of file
diff --git a/semantic-convention-utils/src/main/java/org/hypertrace/semantic/convention/utils/http/HttpSemanticConventionUtils.java b/semantic-convention-utils/src/main/java/org/hypertrace/semantic/convention/utils/http/HttpSemanticConventionUtils.java
index 21a86b25..222bebf9 100644
--- a/semantic-convention-utils/src/main/java/org/hypertrace/semantic/convention/utils/http/HttpSemanticConventionUtils.java
+++ b/semantic-convention-utils/src/main/java/org/hypertrace/semantic/convention/utils/http/HttpSemanticConventionUtils.java
@@ -459,7 +459,7 @@ public static Optional<String> getHttpHost(Event event) {
       try {
         return Optional.ofNullable(getNormalizedUrl(url.get()).getAuthority());
       } catch (MalformedURLException | URISyntaxException e) {
-        LOGGER.warn(
+        LOGGER.debug(
             "On extracting httpHost, received an invalid URL: {}, {}", url.get(), e.getMessage());
       }
     }
@@ -478,7 +478,7 @@ public static Optional<String> getHttpPath(Event event) {
         }
         return Optional.of(removeTrailingSlash(pathVal));
       } catch (MalformedURLException | URISyntaxException e) {
-        LOGGER.warn(
+        LOGGER.debug(
             "On extracting httpPath, received an invalid URL: {}, {}", url.get(), e.getMessage());
       }
     }
@@ -528,7 +528,7 @@ public static Optional<String> getHttpScheme(Event event) {
       try {
         scheme = Optional.of(getNormalizedUrl(url.get()).getProtocol());
       } catch (MalformedURLException | URISyntaxException e) {
-        LOGGER.warn(
+        LOGGER.debug(
             "On extracting httpScheme, received an invalid URL: {}, {}", url.get(), e.getMessage());
       }
     }
@@ -593,7 +593,7 @@ private static Optional<String> getHttpSchemeFromRawAttributes(
             return Optional.of(scheme);
           }
         } catch (Exception e) {
-          LOGGER.warn(
+          LOGGER.debug(
               "On extracting scheme, received an invalid origin header: {}, {}",
               origin,
               e.getMessage());
@@ -671,7 +671,7 @@ public static Optional<String> getHttpQueryString(Event event) {
       try {
         return Optional.ofNullable(getNormalizedUrl(url.get()).getQuery());
       } catch (MalformedURLException | URISyntaxException e) {
-        LOGGER.warn(
+        LOGGER.debug(
             "On extracting httpQueryString, received an invalid URL: {}, {}",
             url.get(),
             e.getMessage());
@@ -855,7 +855,7 @@ static Optional<String> getPathFromUrlObject(String urlPath) {
       URL url = getNormalizedUrl(urlPath);
       return Optional.of(url.getPath());
     } catch (MalformedURLException | URISyntaxException e) {
-      LOGGER.warn(
+      LOGGER.debug(
           "On extracting httpResponseStatusCode, received invalid URL path : {}, {}",
           urlPath,
           e.getMessage());