remm 2005/01/21 00:41:17
Modified: catalina/src/share/org/apache/catalina/realm
JAASCallbackHandler.java
Log:
- 33187: Remove any logging of the password. Submitted by Andrew Jaquith.
Revision Changes Path
1.6 +1 -6
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm/JAASCallbackHandler.java
Index: JAASCallbackHandler.java
===================================================================
RCS file:
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/realm/JAASCallbackHandler.java,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- JAASCallbackHandler.java 21 Sep 2004 23:29:33 -0000 1.5
+++ JAASCallbackHandler.java 21 Jan 2005 08:41:17 -0000 1.6
@@ -71,9 +71,6 @@
if (realm.hasMessageDigest()) {
this.password = realm.digest(password);
- if (log.isDebugEnabled()) {
- log.debug(sm.getString("jaasCallback.digestpassword",
password, this.password));
- }
}
else {
this.password = password;
@@ -131,8 +128,6 @@
realm.getContainer().getLogger().trace(sm.getString("jaasCallback.username",
username));
((NameCallback) callbacks[i]).setName(username);
} else if (callbacks[i] instanceof PasswordCallback) {
- if (realm.getContainer().getLogger().isTraceEnabled())
-
realm.getContainer().getLogger().trace(sm.getString("jaasCallback.password",
password));
final char[] passwordcontents;
if (password != null) {
passwordcontents = password.toCharArray();
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
