[jira] [Created] (CXF-8985) headers masking implementation not replaceable

["Erich Mauerböck (Jira)" <ji...@apache.org>]

Erich Mauerböck created CXF-8985:
------------------------------------

             Summary: headers masking implementation not replaceable
                 Key: CXF-8985
                 URL: https://issues.apache.org/jira/browse/CXF-8985
             Project: CXF
          Issue Type: Bug
          Components: logging
    Affects Versions: 3.5.7
         Environment: OpenJDK 1.8.0_382

CentOS 7

Tomcat 8.5.57

Spring 4.3.30.RELEASE
            Reporter: Erich Mauerböck


Recently I tried to switch away from the deprecated org.apache.cxf.interceptor Logging interceptors to the separate cxf-rt-features-logging module, realizing that I could also switch to the org.apache.cxf.ext.logging.LoggingFeature eliminating the need for explicitly configuring interceptors as described in [https://cxf.apache.org/docs/message-logging.html]

I also wanted to replace my proprietary sensitive masking implementation by a customized intended org.apache.cxf.ext.logging.MaskSensitiveHelper.

 

But I noticed that this only worked for sensitive elements, not for sensitive protocol header names, as MaskSensitiveHelper.maskHeaders() never gets called. Instead, headers masking is done by org.apache.cxf.ext.logging.event.DefaultLogEventMapper, which is final in org.apache.cxf.ext.logging.AbstractLoggingInterceptor, therefore cannot be changed. In turn, MaskSensitiveHelper in DefaultLogEventMapper is also not changeable (no setter).

This behaviour cannot have been intended that way.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)