[
https://issues.apache.org/jira/browse/JCRVLT-175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alex COLLIGNON updated JCRVLT-175:
----------------------------------
Attachment: 0001-Test-information-disclosure-in-debug-statement-toStr.patch
0002-Fix-information-disclosure-in-debug-statement-toStri.patch
Please find attached two patches providing a test case and a fix which consists
of replacing the user info part with some stars.
> Ensure RcpTask is clearing out sensitive data in toString statement
> -------------------------------------------------------------------
>
> Key: JCRVLT-175
> URL: https://issues.apache.org/jira/browse/JCRVLT-175
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: vlt
> Reporter: Alex COLLIGNON
> Priority: Minor
> Attachments:
> 0001-Test-information-disclosure-in-debug-statement-toStr.patch,
> 0002-Fix-information-disclosure-in-debug-statement-toStri.patch
>
>
> It would nice to prevent RcpTask#toString to display credentials that might
> be provided as part of the URL.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
