[OFBIZ-6886] Hide sessionId in logs by default, show them using a properties

• Type: Sub-task
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Affects Version/s: Trunk
• Fix Version/s: 16.11.01
• Component/s: framework
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 08/Feb/16 15:09
• Updated: 06/Feb/17 20:18
• Resolved: 09/Feb/16 10:26

Description

There are few cases where we show the sessionId in logs (using UtilHttp.getSessionId() in or HttpSessionEvent.getSession().getId()) in other places)
Despite we secured the log access at r1489461, I suggested on the dev ML a properties to opt in, false by default. I will apply as a lazy consensus.

Issue Links

• is related to: OFBIZ-6872 Remove all sessionsIds put in URLs