diff --git a/source/app/metrics/index.mjs b/source/app/metrics/index.mjs
index 6bd095e1..5b663e6f 100644
--- a/source/app/metrics/index.mjs
+++ b/source/app/metrics/index.mjs
@@ -10,6 +10,7 @@
       try {
 
         //Debug
+          login = login.replace(/[\n\r]/g, "")
           console.debug(`metrics/compute/${login} > start`)
           console.debug(util.inspect(q, {depth:Infinity, maxStringLength:256}))
 
diff --git a/source/app/web/instance.mjs b/source/app/web/instance.mjs
index 6e6f18e3..e2589d72 100644
--- a/source/app/web/instance.mjs
+++ b/source/app/web/instance.mjs
@@ -140,7 +140,7 @@
     //Metrics
       app.get("/:login", ...middlewares, async (req, res) => {
         //Request params
-          const {login} = req.params
+          const login = req.params.login?.replace(/[\n\r]/g, "")
           if ((restricted.length)&&(!restricted.includes(login))) {
             console.debug(`metrics/app/${login} > 403 (not in whitelisted users)`)
             return res.sendStatus(403)