[jira] [Commented] (CAMEL-11269) URISupport sanitizeUri partial support for RAW()

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CAMEL-11269?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16008189#comment-16008189 ] 

ASF GitHub Bot commented on CAMEL-11269:
----------------------------------------

GitHub user paoloantinori opened a pull request:

    https://github.com/apache/camel/pull/1690

    CAMEL-11269 - fix for URISupport and masking secrets

    

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/paoloantinori/camel CAMEL-11269

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/camel/pull/1690.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #1690
    
----
commit 84ed271308af0d4d624a3636d85071f70c62c762
Author: Paolo Antinori <pa...@redhat.com>
Date:   2017-05-12T14:09:52Z

    CAMEL-11269 - fix for URISupport and masking secrets

----


> URISupport sanitizeUri partial support for RAW()
> ------------------------------------------------
>
>                 Key: CAMEL-11269
>                 URL: https://issues.apache.org/jira/browse/CAMEL-11269
>             Project: Camel
>          Issue Type: Bug
>          Components: camel-core
>    Affects Versions: 2.19.0
>            Reporter: Paolo Antinori
>            Assignee: Paolo Antinori
>
> The usage of {{&}} symbol in a password wrapped by {{RAW()}} function breaks the masking of the password.
> The result of this is a partial leak of the clear text password.
> See this example:
> {{password=RAW(abc&SUFFIX)}} is translated into {{password=xxxxxx&SUFFIX}}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)