[jira] [Updated] (SYNAPSE-1058) VFS transport has the clear text password in the exceptions and Debug log

["Vanjikumaran Sivajothy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SYNAPSE-1058?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vanjikumaran Sivajothy updated SYNAPSE-1058:
--------------------------------------------
    Attachment: SYNAPSE-1058.patch

patch to mask the password and patch using VFSUtils.maskURLPassword [1]

https://synapse.apache.org/apidocs/org/apache/synapse/transport/vfs/VFSUtils.html#maskURLPassword(java.lang.String)

> VFS transport has the clear text password in the exceptions and Debug log
> -------------------------------------------------------------------------
>
>                 Key: SYNAPSE-1058
>                 URL: https://issues.apache.org/jira/browse/SYNAPSE-1058
>             Project: Synapse
>          Issue Type: Bug
>          Components: Transports
>            Reporter: Vanjikumaran Sivajothy
>            Assignee: Hiranya Jayathilaka
>              Labels: transport
>         Attachments: SYNAPSE-1058.patch
>
>
> Most of the logs in vfs transport not secure enoght to hide the clear text password on the log when exception throws from vfs or debug enabled.
> This need to fixed like r1378457 [1]
> [1]https://www.mail-archive.com/commits@synapse.apache.org/msg02701.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@synapse.apache.org
For additional commands, e-mail: dev-help@synapse.apache.org