From 58da5a929f6b1143e3dcef18f6a8d96c9e4ca450 Mon Sep 17 00:00:00 2001
From: Borisz Juhasz <borisz.juhasz@emarsys.com>
Date: Thu, 23 Jan 2025 16:43:10 +0100
Subject: [PATCH] SECURITY-10102: add error handling to date parsing

Co-authored-by: Laszlo Losonczy <laszlo.losonczy@emarsys.com>
---
 escher.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/escher.go b/escher.go
index 9286826..a447c73 100644
--- a/escher.go
+++ b/escher.go
@@ -9,6 +9,7 @@ import (
   "strings"
   "sort"
   "time"
+  "log"
   "net/url"
   "regexp"
   . "github.com/PuerkitoBio/purell"
@@ -195,7 +196,10 @@ func (config EscherConfig) getDefaultHeaders(headers EscherRequestHeaders) Esche
   if !hasHeader(config.DateHeaderName, headers) {
     dateHeader := config.Date
     if strings.ToLower(config.DateHeaderName) == "date" {
-      var t, _ = time.Parse("20060102T150405Z", config.Date)
+      t, err := time.Parse("20060102T150405Z", config.Date)
+      if err != nil {
+        log.Println("Error parsing date header")
+      }
       dateHeader = t.Format("Fri, 02 Jan 2006 15:04:05 GMT")
     }
     newHeaders = append(newHeaders, [2]string { config.DateHeaderName, dateHeader })