Hi,

You can take this log implementation[1][2] as an example.
If you just want to mask the password property, you can use String
replace method to remove it.

[1]https://konstantinpavlov.net/blog/2015/07/26/secure-java-logging-with-logback/
[2]https://github.com/javabeanz/owasp-security-logging

Willem Jiang

Twitter: willemjiang
Weibo: 姜宁willem

On Mon, Apr 15, 2019 at 9:06 AM wjm wjm <[email protected]> wrote:
>
> https://github.com/apache/servicecomb-java-chassis/pull/1180
>
> inspector of configuration need to change some value to "******", eg:
> password

Reply via email to