I think I got the idea from somewhere else in the code. It's salted with
the class name at least.


On 9 June 2014 21:46, Gary Gregory <[email protected]> wrote:

> On Mon, Jun 9, 2014 at 8:55 PM, <[email protected]> wrote:
>
> > Author: mattsicker
> > Date: Tue Jun 10 00:55:33 2014
> > New Revision: 1601536
> >
> > URL: http://svn.apache.org/r1601536
> > Log:
> > Add sensitive() attribute to annotations.
> >
> > Modified:
> >
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginAttribute.java
> >
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginBuilderAttribute.java
> >
> > Modified:
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginAttribute.java
> > URL:
> >
> http://svn.apache.org/viewvc/logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginAttribute.java?rev=1601536&r1=1601535&r2=1601536&view=diff
> >
> >
> ==============================================================================
> > ---
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginAttribute.java
> > (original)
> > +++
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginAttribute.java
> > Tue Jun 10 00:55:33 2014
> > @@ -94,4 +94,10 @@ public @interface PluginAttribute {
> >       */
> >      String value();
> >
> > +    /**
> > +     * Indicates that this attribute is a sensitive one that shouldn't
> be
> > logged directly. Such attributes will instead
> > +     * be output as a hashed value.
> >
>
> But why risk even that? Just log it as "hidden" or somesuch.
>
> Gary
>
>
> > +     */
> > +    boolean sensitive() default false;
> > +
> >  }
> >
> > Modified:
> >
> logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginBuilderAttribute.java
> > URL:
> >
> http://svn.apache.org/viewvc/logging/log4j/log4j2/trunk/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/PluginBuilderAttribute.java?rev=1601536&r1=1601535&r2=1601536&view=diff
> >
>
> ----- Message truncated -----
>
>
>
>
> --
> E-Mail: [email protected] | [email protected]
> Java Persistence with Hibernate, Second Edition
> <http://www.manning.com/bauer3/>
> JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
> Spring Batch in Action <http://www.manning.com/templier/>
> Blog: http://garygregory.wordpress.com
> Home: http://garygregory.com/
> Tweet! http://twitter.com/GaryGregory
>



-- 
Matt Sicker <[email protected]>

Reply via email to