[
https://issues.apache.org/jira/browse/CAMEL-14375?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17010350#comment-17010350
]
Claus Ibsen commented on CAMEL-14375:
-------------------------------------
Also we could consider logging only the start of the route urls (without
parameters), as that should be sufficient and with all the parameters its a bit
too verbose. Having the route id, and url context-path should be fine. Then no
query parameters is logged that may otherwise contain some details you may not
want to be logged at INFO level. Likewise on startup.
> camel-kafka - The saslJaasConfig option may contain sensitive information
> that can be logged
> --------------------------------------------------------------------------------------------
>
> Key: CAMEL-14375
> URL: https://issues.apache.org/jira/browse/CAMEL-14375
> Project: Camel
> Issue Type: Improvement
> Components: camel-kafka
> Reporter: Claus Ibsen
> Priority: Major
> Fix For: 2.25.0, 3.1.0
>
>
> See SO
> https://stackoverflow.com/questions/57912692/camel-defaultshutdownstrategy-logging-full-url
> We would need to mask this key (add it to existing known keys) if it always
> contains sensitive details such as username and passwords
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
