You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2024/07/11 01:07:00 UTC

[jira] [Work logged] (AMQ-9515) Audit log contains message body when sent via the web console

     [ https://issues.apache.org/jira/browse/AMQ-9515?focusedWorklogId=925333&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-925333 ]

ASF GitHub Bot logged work on AMQ-9515:
---------------------------------------

                Author: ASF GitHub Bot
            Created on: 11/Jul/24 01:06
            Start Date: 11/Jul/24 01:06
    Worklog Time Spent: 10m 
      Work Description: kenliao94 opened a new pull request, #1251:
URL: https://github.com/apache/activemq/pull/1251

   As pointed out in https://issues.apache.org/jira/browse/AMQ-9515 message body is sensitive data and sending a text message using the web console shouldn't log the message content in the audit log. 




Issue Time Tracking
-------------------

            Worklog Id:     (was: 925333)
    Remaining Estimate: 0h
            Time Spent: 10m

> Audit log contains message body when sent via the web console
> -------------------------------------------------------------
>
>                 Key: AMQ-9515
>                 URL: https://issues.apache.org/jira/browse/AMQ-9515
>             Project: ActiveMQ Classic
>          Issue Type: Bug
>          Components: Web Console
>            Reporter: Jean-Baptiste Onofré
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> When sending a message via the WebConsole, the body of the message is fully displayed in the audit log. It's the only kind of messages behaving this way.
> We should not display message body in audit log, or at least we should have a configuration to control this.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@activemq.apache.org
For additional commands, e-mail: issues-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact