[IGNITE-4167] Add an option to avoid printing out sensitive data into logs

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.9
• Assignee: Alexandr Kuramshin
• Reporter: Denis Kholodov
• Created: 03/Nov/16 10:44
• Updated: 01/Aug/19 22:01
• Resolved: 27/Dec/16 05:58

Description

We are seeing sensitive cache data being output in ignite debug logging. I've tracked it down to at least two places:

1. GridToStringBuilder uses reflection to print all fields in cache objects that are not annotated with @GridToStringExclude
2. GridCacheMapEntry does a direct toString() call on the value objects in a debug log

As a fabric platform, we won't always have control over the object classes being added to/retrieved from the cache.

We must always assume that all keys and values are sensitive and should not be outputted in logs except in local debugging situations. To this end, we need a configuration option (turned OFF by default) that allows keys/values to be written to log messages.

Issue Links

• links to: GitHub Pull Request #1308
• links to: GitHub Pull Request #1308