[CAMEL-5241] Sanitize URI in debug messages

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.9.2
• Fix Version/s: 2.9.3, 2.10.0
• Component/s: camel-core
• Labels: security
• Patch Info: Patch Available
• Estimated Complexity: Unknown
• Assignee: Claus Ibsen
• Reporter: João Loureiro
• Created: 03/May/12 11:22
• Updated: 05/May/12 07:54
• Resolved: 05/May/12 07:54

Description

Sanitizes URI in debug messages that may otherwise reveal sensitive information.

Design note:
I opted to provide a specific method, URISupport.sanitizePath(String), instead of relaxing the match in URISupport.sanitizeUri(String). This is because formally an authority component in an URI is preceded by "//", which is not contained in the path part of the URI (see http://docs.oracle.com/javase/6/docs/api/java/net/URI.html).