[jira] [Resolved] (CAMEL-12480) HttpOperationFailedException exposes password when using basic auth with user:password@host notation

["Pascal Schumacher (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-12480?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pascal Schumacher resolved CAMEL-12480.
---------------------------------------
    Resolution: Fixed
      Assignee: Pascal Schumacher

> HttpOperationFailedException exposes password when using basic auth with user:password@host notation
> ----------------------------------------------------------------------------------------------------
>
>                 Key: CAMEL-12480
>                 URL: https://issues.apache.org/jira/browse/CAMEL-12480
>             Project: Camel
>          Issue Type: Bug
>          Components: camel-ahc, camel-http-common, camel-netty-http, camel-netty4-http, camel-undertow
>    Affects Versions: 2.21.0
>            Reporter: Pascal Schumacher
>            Assignee: Pascal Schumacher
>            Priority: Minor
>             Fix For: 2.20.4, 2.21.2, 2.22.0
>
>
> Simplified route:
> {code}
> from(inUri)
>             .toD("http4://user:password@host:port/path");
> {code}
> When a HttpOperationFailedException occurs the message contains the unmasked password e.g. "HTTP operation failed invoking http://user:password@host:port/path ..."
> I guess Camel should mask the password.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)