alanblueshift commented on issue #993: Obfuscate password in output logs
URL: https://github.com/apache/fluo/issues/993#issuecomment-354486174
 
 
   In Apache Camel project they use an util class called URISupport to 
obfuscate sensitive data from URL's.
   ```java
   public static String sanitizeUri(String uri) {
       // use xxxxx as replacement as that works well with JMX also
       String sanitized = uri;
       if (uri != null) {
           sanitized = SECRETS.matcher(sanitized).replaceAll("$1=xxxxxx");
           sanitized = 
USERINFO_PASSWORD.matcher(sanitized).replaceFirst("$1xxxxxx$3");
       }
       return sanitized;
   }
   
   public void testSanitizeUriWithUserInfo() {
       String uri = 
"jt400://GEORGE:HARRISON@LIVERPOOL/QSYS.LIB/BEATLES.LIB/PENNYLANE.DTAQ";
       String expected = 
"jt400://GEORGE:xxxxxx@LIVERPOOL/QSYS.LIB/BEATLES.LIB/PENNYLANE.DTAQ";
       assertEquals(expected, URISupport.sanitizeUri(uri));
   }
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to