[CXF-9066] MaskSensitiveHelper does not mask multi-line content

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.5.9, 4.0.5, 3.6.4
• Fix Version/s: 4.1.0, 3.5.10, 3.6.5, 4.0.6
• Component/s: logging
• Labels: bug logging
• Estimated Complexity: Novice
• Flags: Patch

Language

java

• Assignee: Unassigned
• Reporter: Daniel Holm
• Created: 14/Oct/24 13:55
• Updated: 16/Oct/24 00:56
• Resolved: 16/Oct/24 00:56

Description

MaskSensitiveHelper does not recognise the sensitive element name(s) if they contain multi-line content.

This f.ex does not match the password element, and the data is left unmasked in the logs:

maskSensitiveHelper.addSensitiveElementNames(Set.of("password")) 

<user>testUser</user><password>my 
secret 
password</password> 

 

 

Issue Links

• links to: GitHub Pull Request #2105