You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2009/11/30 22:41:17 UTC

DO NOT REPLY [Bug 48305] New: mod_jk - JK Status Manager page Dump shows my secret

https://issues.apache.org/bugzilla/show_bug.cgi?id=48305

           Summary: mod_jk - JK Status Manager page Dump shows my secret
           Product: Tomcat Connectors
           Version: 1.2.28
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: regression
          Priority: P2
         Component: mod_jk
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: fredk2@gmail.com


Hi,

I setup the JK Status for mod_jk 1.2.28 and the "Dump" link shows all the
properties and *disturbingly* :) also
    worker.template.secret=my-secret-word

We spoke about this once before when the link "Property" showed all the
properties and "secret". This was fixed maybe circa 1.2.25 .  I would kindly
suggest that the same exclusion be applied to Dump....or introduce another
property:
    worker.jkstatus.dump=false

Many Thanks - Fred

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 48305] mod_jk - JK Status Manager page Dump shows my secret

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48305

Mladen Turk <mt...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #1 from Mladen Turk <mt...@apache.org> 2009-12-21 04:40:08 UTC ---
Fixed in the SVN. Any property ending with .secret will not be shown in dump

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 48305] mod_jk - JK Status Manager page Dump shows my secret

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48305

--- Comment #2 from Rainer Jung <ra...@kippdata.de> 2010-02-23 02:55:27 UTC ---
Will be part of 1.2.29.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org