You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by "Gary Tully (JIRA)" <ji...@apache.org> on 2011/03/21 13:23:06 UTC

[jira] [Resolved] (AMQ-3231) Stomp Frame should mask passcode header in toString output, so it does not pollute the log

     [ https://issues.apache.org/jira/browse/AMQ-3231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gary Tully resolved AMQ-3231.
-----------------------------

    Resolution: Fixed

http://svn.apache.org/viewvc?rev=1083753&view=rev

> Stomp Frame should mask passcode header in toString output, so it does not pollute the log
> ------------------------------------------------------------------------------------------
>
>                 Key: AMQ-3231
>                 URL: https://issues.apache.org/jira/browse/AMQ-3231
>             Project: ActiveMQ
>          Issue Type: Improvement
>          Components: Transport
>    Affects Versions: 5.4.2
>         Environment: STOMP
>            Reporter: Gary Tully
>            Assignee: Gary Tully
>              Labels: Logging, STOMP
>             Fix For: 5.5.0
>
>
> Logging of stomp CONNECT frame includes the raw passcode. This should be masked with "****"
> so instead of:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
> 2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
> CONNECT
> host:big77
> accept-version:1.0,1.1
> passcode:bar
> login:foo{code} it should be:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
> 2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
> CONNECT
> host:big77
> accept-version:1.0,1.1
> passcode:*****
> login:foo{code}

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira