You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by el...@apache.org on 2014/07/23 18:11:34 UTC

svn commit: r1612859 - /directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java

Author: elecharny
Date: Wed Jul 23 16:11:34 2014
New Revision: 1612859

URL: http://svn.apache.org/r1612859
Log:
Fix for DIRAPI-197 (the clear text password was exposed)

Modified:
    directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java

Modified: directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java
URL: http://svn.apache.org/viewvc/directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java?rev=1612859&r1=1612858&r2=1612859&view=diff
==============================================================================
--- directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java (original)
+++ directory/shared/trunk/ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/BindRequestImpl.java Wed Jul 23 16:11:34 2014
@@ -475,8 +475,7 @@ public class BindRequestImpl extends Abs
 
             if ( isSimple )
             {
-                sb.append( "        Simple authentication : '" ).append( Strings.utf8ToString( credentials ) )
-                    .append( '/' ).append( Strings.dumpBytes( credentials ) ).append( "'\n" );
+                sb.append( "        Simple authentication : '" ).append( "(omitted-for-safety)" ).append( "'\n" );
             }
             else
             {