[jira] [Updated] (CASSANDRA-21113) PasswordObfuscator fails to obfuscate certain passwords

["Andrew Weaver (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CASSANDRA-21113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Weaver updated CASSANDRA-21113:
--------------------------------------
    Attachment: trunk.patch
                4_0.patch

> PasswordObfuscator fails to obfuscate certain passwords
> -------------------------------------------------------
>
>                 Key: CASSANDRA-21113
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-21113
>             Project: Apache Cassandra
>          Issue Type: Bug
>            Reporter: Andrew Weaver
>            Assignee: Andrew Weaver
>            Priority: Normal
>         Attachments: 4_0.patch, trunk.patch
>
>
> PasswordObfuscator fails to obfuscate passwords containing regex characters ($, +, ?, etc.) or the regex end-quote sequence \E.
> This leads to passwords containing these characters being logged in clear text in audit logs for DCL statements, or in the case of \E on trunk, a java.util.regex.PatternSyntaxException being thrown.
> I've attached patches for the 4.0 branch and trunk.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org