Gaëtan Pitteloud created CXF-8982:
-------------------------------------
Summary: LoggingFeature does not hide sensitive xml elements with
namespace prefix
Key: CXF-8982
URL: https://issues.apache.org/jira/browse/CXF-8982
Project: CXF
Issue Type: Improvement
Components: logging
Affects Versions: 4.0.3
Reporter: Gaëtan Pitteloud
When setting a sensitive element name in the LoggingFeature, the element is not
hidden if the element appears in XML with a namespace prefix.
It's not possible to just add a prefix when configuring the LoggingFeature:
# this does not work for JSON
# the namespace prefix is typically generated by the marshaller (ns1, ns2,
etc) thus unknown during configuration
The solution is to change the xml regex templates in MaskSensitiveHelper by
adding the optional prefix group (\w+:)? in the opening and closing tags:
{code:java}
private static final String MATCH_PATTERN_XML_TEMPLATE =
"(<(\\w+:)?-ELEMENT_NAME-.*?>)(.*?)(</(\\w+:)?-ELEMENT_NAME->)";
private static final String REPLACEMENT_XML_TEMPLATE = "$1XXX$4";
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
