You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "Andor Molnar (Jira)" <ji...@apache.org> on 2026/08/28 16:36:00 UTC

[jira] [Created] (ZOOKEEPER-5082) Remove special characters from username in audit logs

Andor Molnar created ZOOKEEPER-5082:
---------------------------------------

             Summary: Remove special characters from username in audit logs
                 Key: ZOOKEEPER-5082
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5082
             Project: ZooKeeper
          Issue Type: Bug
          Components: server
    Affects Versions: 3.9.5, 3.10.0
            Reporter: Andor Molnar
            Assignee: Andor Molnar


Follow up on ZOOKEEPER-3979 which hasn't implemented sanitization of the username input before logging it, hence the original log forgery issue hasn't been resolved.

Something similar to what has been done in EnsembleAuthenticationProvider in ZOOKEEPER-5058 would be preferable.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)