[ 
https://issues.apache.org/jira/browse/LANG-1755?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17889278#comment-17889278
 ] 

Gary D. Gregory edited comment on LANG-1755 at 10/14/24 5:25 PM:
-----------------------------------------------------------------

But it should be hidden IMO, otherwise you're showing where the secret is 
located, which in itself could be considered a problem. You're basically 
putting a target on that class. Maybe people will then look for that class 
specifically in serialized payloads and proxy, who knows. It's like advertising 
where your safe is in your house.


was (Author: garydgregory):
But it should be hidden IMO, otherwise you're showing where the secret is 
located, which in itself could be considered a problem. You're basically 
putting a target on that class. Maybe people will then look for that class 
specifically in serialized payloads and proxy, who knows.

> New Annotation to support masking of PII data
> ---------------------------------------------
>
>                 Key: LANG-1755
>                 URL: https://issues.apache.org/jira/browse/LANG-1755
>             Project: Commons Lang
>          Issue Type: New Feature
>          Components: lang.*
>            Reporter: Mukul Bindal
>            Priority: Minor
>   Original Estimate: 2,016h
>  Remaining Estimate: 2,016h
>
> I want to add a new feature in Apache commons lang. 
> Create a new Annotation support such that a POJO class annotated with 
> annotation @PIIContent will mask the instance variables annotated with 
> @PIIValue in the toString() method of the annotated class. 
> This feature is useful nowadays as PII masking is required in logging.
> I want to keep it in Apache commons lang library as it deals with String data.
> <More description to be added. I will add a proper description with examples 
> and use case.>



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to