[CAMEL-14375] camel-kafka - The saslJaasConfig option may contain sensitive information that can be logged

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.1, 2.25.0, 3.1.0
• Component/s: camel-kafka
• Estimated Complexity: Unknown
• Assignee: Claus Ibsen
• Reporter: Claus Ibsen
• Created: 08/Jan/20 04:18
• Updated: 08/Jan/20 13:39
• Resolved: 08/Jan/20 13:39

Description

See SO
https://stackoverflow.com/questions/57912692/camel-defaultshutdownstrategy-logging-full-url

We would need to mask this key (add it to existing known keys) if it always contains sensitive details such as username and passwords

Issue Links

• is fixed by: CAMEL-14379 camel-core - Route lifecycle should not log full endpoint uris