Obfuscate password in output logs #993

Activity

1. blueshift-brasil commented on Dec 29, 2017

   

   blueshift-brasil

   on Dec 29, 2017

   ContributorAuthor

   More actions

   In Apache Camel project they use an util class called URISupport to obfuscate sensitive data from URL's.

   public static String sanitizeUri(String uri) {
       // use xxxxx as replacement as that works well with JMX also
       String sanitized = uri;
       if (uri != null) {
           sanitized = SECRETS.matcher(sanitized).replaceAll("$1=xxxxxx");
           sanitized = USERINFO_PASSWORD.matcher(sanitized).replaceFirst("$1xxxxxx$3");
       }
       return sanitized;
   }
   
   public void testSanitizeUriWithUserInfo() {
       String uri = "jt400://GEORGE:HARRISON@LIVERPOOL/QSYS.LIB/BEATLES.LIB/PENNYLANE.DTAQ";
       String expected = "jt400://GEORGE:xxxxxx@LIVERPOOL/QSYS.LIB/BEATLES.LIB/PENNYLANE.DTAQ";
       assertEquals(expected, URISupport.sanitizeUri(uri));
   }