[BUG] Missing HTTP header sanitization when reading values from `/etc/{os,lsb}-release` about azure-sdk-for-net

[Mr-MooMoo]

As a hacky workaround (and totally un-nix-y way, i know - just to be able to work):

sudo ushare -m bash
mount -o remount,rw /nix/store
sed -i 's/ñ/n/g' /etc/os-release
sed -i 's/ñ/n/g' /etc/lsb-release
exit

(replaces all ñ with n) in given files, so nuget can pull packages, and dotnet restore keeps working
Will be overwritten on every update of your nix-config files!

[jsquire]

@m-redding: Would you take a look at the Core logic for User Agent strings?

//cc: @annelo-msft, @KrzysztofCwalina for awareness.

[m-redding]

@nazarewk I'm working on investigating a fix for this, but if you don't want the user agent string to be added to the request at all, you can set the environment variable "AZURE_TELEMETRY_DISABLED" to true. There's also a setting for this in the SDK but it doesn't sound like you're using the identity SDK directly so I'm assuming you can't take advantage of that.

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[wfurt]

Azure/azure-sdk-for-net@5004a5c/sdk/eventhub/Azure.Messaging.EventHubs/src/Core/ClientLibraryInformation.cs#L56-L82

the RuntimeInformation.OSDescription makes no guarantee about HTTP safety -> "An opaque string that describes the operating system on which the app is running."

[jsquire]

Azure/azure-sdk-for-net@5004a5c/sdk/eventhub/Azure.Messaging.EventHubs/src/Core/ClientLibraryInformation.cs#L56-L82

the RuntimeInformation.OSDescription makes no guarantee about HTTP safety -> "An opaque string that describes the operating system on which the app is running."

@wfurt: Event Hubs an AMQP-based library and does not send HTTP requests. The class that you're referencing sets link properties of AMQP type string, which is Unicode-based.

[wfurt]

that works only if you are admin/root -> not scalable IMHO.