https://issues.apache.org/bugzilla/show_bug.cgi?id=48305
Summary: mod_jk - JK Status Manager page Dump shows my secret
Product: Tomcat Connectors
Version: 1.2.28
Platform: All
OS/Version: All
Status: NEW
Severity: regression
Priority: P2
Component: mod_jk
AssignedTo: dev@tomcat.apache.org
ReportedBy: fre...@gmail.com
Hi,
I setup the JK Status for mod_jk 1.2.28 and the "Dump" link shows all the
properties and *disturbingly* :) also
worker.template.secret=my-secret-word
We spoke about this once before when the link "Property" showed all the
properties and "secret". This was fixed maybe circa 1.2.25 . I would kindly
suggest that the same exclusion be applied to Dump....or introduce another
property:
worker.jkstatus.dump=false
Many Thanks - Fred
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
