On Fri, 10 Jun 2022 13:41:48 GMT, Matthias Baesken <mbaes...@openjdk.org> wrote:
> Hi Alan , sure we could use something like the already existing hostInfo of
> property jdk.includeInException private static final boolean
> enhancedExceptionText = SecurityProperties.includedInExceptions("hostInfo");
> and make the enhancement optional/switchable this way. On the other hand we
> already print the url (_**Cannot parse url: ldap://ad_jbs.ttt.net:389/xyz**_
> ) in the existing exception text so I wonder what additional problem the
> added info would bring? That's why I did not use the property so far. But if
> you think there could be special cases were it would be problematic to have
> the enhancement, I'll add the usage of the property.
This is a security sensitive area and not possible to discuss all issues in JBS
or in this PR. If this code is changed then it will require someone from
security-dev to review.
-------------
PR: https://git.openjdk.org/jdk/pull/9126
