[CAMEL-11269] URISupport sanitizeUri partial support for RAW()

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.19.0
• Fix Version/s: 2.17.7, 2.18.4, 2.19.1, 2.20.0
• Component/s: camel-core
• Patch Info: Patch Available
• Estimated Complexity: Unknown
• External issue URL: https://issues.jboss.org/browse/ENTESB-6796
• Assignee: Paolo Antinori
• Reporter: Paolo Antinori
• Created: 12/May/17 14:07
• Updated: 13/May/17 08:26
• Resolved: 13/May/17 08:10

Description

The usage of & symbol in a password wrapped by RAW() function breaks the masking of the password.

The result of this is a partial leak of the clear text password.

See this example:

password=RAW(abc&SUFFIX) is translated into password=xxxxxx&SUFFIX

Issue Links

• links to: GitHub Pull Request #1690