[CAMEL-7587] MessageHistory stores passwords in plain text

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.13.2
• Fix Version/s: 2.12.5, 2.13.3, 2.14.0
• Component/s: camel-core
• Estimated Complexity: Unknown
• Assignee: Willem Jiang
• Reporter: Marco Zapletal
• Created: 09/Jul/14 14:08
• Updated: 10/Jul/14 05:57
• Resolved: 10/Jul/14 05:57

Description

The MessageHistory feature currently keeps passwords in plain text in case they are part of the URI.
MessageHelper.doDumpMessageHistoryStacktrace() does some sanitizing, but only for the from node - other nodes/processors are currently not sanitized.
In order to prevent handling sensitive information in the message history in general, I would suggest to sanitize the URI already when storing a MessageHistory item.