You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@isis.apache.org by "Jörg Rade (Jira)" <ji...@apache.org> on 2022/04/08 06:59:00 UTC

[jira] [Created] (ISIS-2995) IsisModuleSecurityBypass does not avoid BCrypt

Jörg Rade created ISIS-2995:
-------------------------------

             Summary: IsisModuleSecurityBypass does not avoid BCrypt 
                 Key: ISIS-2995
                 URL: https://issues.apache.org/jira/browse/ISIS-2995
             Project: Isis
          Issue Type: Bug
    Affects Versions: 2.0.0-M7
            Reporter: Jörg Rade


Even when IsisModuleSecurityBypass.class  is included in DemoAppWicketJpa, BCrypt action are logged to the console (using parameters:  -Xms1G -Djava.security.egd=file:///dev/./urandom -Djava.security.debug="provider,engine=SecureRandom")

See:   https://the-asf.slack.com/archives/CFC42LWBV/p1649400664122289?thread_ts=1648577147.703919&cid=CFC42LWBV



--
This message was sent by Atlassian Jira
(v8.20.1#820001)