Rafał Gała created CAMEL-14422:
----------------------------------

             Summary: DefaultShutdownStrategy not masking sensitive information
                 Key: CAMEL-14422
                 URL: https://issues.apache.org/jira/browse/CAMEL-14422
             Project: Camel
          Issue Type: Bug
          Components: camel-core
    Affects Versions: 3.1.0
            Reporter: Rafał Gała


When *DefaultShutdownStrategy* shuts down a route, it logs sensitive 
information, like passwords for example. 

 

For Jt400Endpoint it looks like this:

 
{noformat}
2020-01-22 13:11:14.126 [Camel (camel-1) thread #585 - ShutdownTask] INFO 
org.apache.camel.impl.engine.DefaultShutdownStrategy.run:694 - Route: route27 
shutdown complete, was consuming from: 
jt400://user:password@host/QSYS.LIB/USER.LIB/DATAQUEUE.DTAQ{noformat}
 

Should *DefaultShutdownStrategy* use *URISupport.sanitizeUri* method before 
logging endpoint URI?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to