Jacques Le Roux created OFBIZ-6886:
--------------------------------------
Summary: Hide sessionId in logs by default, show them using a
properties
Key: OFBIZ-6886
URL: https://issues.apache.org/jira/browse/OFBIZ-6886
Project: OFBiz
Issue Type: Sub-task
Components: framework, specialpurpose/pos
Affects Versions: Trunk
Reporter: Jacques Le Roux
Assignee: Jacques Le Roux
Priority: Minor
Fix For: Upcoming Branch
There are few cases where we show the sessionId in logs (using
UtilHttp.getSessionId() in or HttpSessionEvent.getSession().getId()) in other
places)
Despite we secured the log access at r1489461, I suggested on the dev ML a
properties to opt in, false by default. I will apply as a lazy consensus.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)