[CXF-7070] HTTP headers logged in debug

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.8, 3.0.11, 3.2.0
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Fadi Mohsen
• Created: 27/Sep/16 13:00
• Updated: 21/Oct/16 18:45
• Resolved: 13/Oct/16 12:12

Description

We try to avoid logging of authorization header value in out/in requests, we filtered out these in interceptors, but turns out these are logged anyway in CXF debug mode:

        if (LOG.isLoggable(Level.FINE)) {
            LOG.log(Level.FINE, "Request Headers: " + headers.toString());
        }

Issue Links

• links to: GitHub Pull Request #178