[
https://issues.apache.org/jira/browse/HADOOP-17510?focusedWorklogId=546525&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-546525
]
ASF GitHub Bot logged work on HADOOP-17510:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 03/Feb/21 01:14
Start Date: 03/Feb/21 01:14
Worklog Time Spent: 10m
Work Description: prasad-acit opened a new pull request #2673:
URL: https://github.com/apache/hadoop/pull/2673
This patch will remove sensitive information logging (Cookies). Log message
has no significance, so deleted the complete log message.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 546525)
Time Spent: 0.5h (was: 20m)
> Hadoop prints sensitive Cookie information.
> -------------------------------------------
>
> Key: HADOOP-17510
> URL: https://issues.apache.org/jira/browse/HADOOP-17510
> Project: Hadoop Common
> Issue Type: Bug
> Affects Versions: 3.3.0
> Reporter: Renukaprasad C
> Priority: Major
> Labels: pull-request-available
> Attachments: HADOOP-17510.001.patch
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.AuthCookieHandler#setAuthCookie
> - prints cookie information in log. Any sensitive infomation in Cookies will
> be logged, which needs to be avaided.
> LOG.trace("Setting token value to {} ({})", authCookie, oldCookie);
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
