[CXF-8099] Hiding sensitive information in request and response logs via configuration

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.4
• Fix Version/s: 3.4.0
• Component/s: logging
• Estimated Complexity: Unknown
• Assignee: Andrei Shakirin
• Reporter: K G N Nisansala
• Created: 27/Aug/19 05:48
• Updated: 22/Dec/21 20:43
• Resolved: 30/Jul/20 22:25

Description

When request hitting the cxf-logging enabled system. It logged all the details in request in plain text,. If the request body contains sensitive data like passwords, imi numbers and sms messages, all details logged, same applied to response as well. With this improvement we can hide it based on the configured keys.

Issue Links

• links to: GitHub Pull Request #681