You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@commons.apache.org by "Andrey Turbanov (Jira)" <ji...@apache.org> on 2024/05/28 14:13:00 UTC

[jira] [Created] (VFS-854) SoftRefFilesCache logs password when FS is closed

Andrey Turbanov created VFS-854:
-----------------------------------

             Summary: SoftRefFilesCache logs password when FS is closed
                 Key: VFS-854
                 URL: https://issues.apache.org/jira/browse/VFS-854
             Project: Commons VFS
          Issue Type: Bug
    Affects Versions: 2.9.0
            Reporter: Andrey Turbanov


We use DEBUG logging enabled for VFS to diagnose integration problems with external connections.
Unfortunately it leads to logging of clear text password in logs if use basic auth with SFTP/HTTP4S connectors
{noformat}
D 240526 060013.993 [ScheduledIpfSynchronizer_Worker-1] SoftRefFilesCache - Close FileSystem: http4s://mylogin:mypassword@my.company.com:8443/
{noformat}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)