Uploaded image for project: 'Geronimo'
  1. Geronimo
  2. GERONIMO-5638

Remove the encrypt(String) method in ConfiguredEncryption

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.1.7, 2.2.1, 3.0.0
    • security
    • Security Level: public (Regular issues)
    • None

    Description

      I found the ConfiguredEncryption has a method as following:

      public String encrypt(String text)

      { return EncryptionManager.encrypt(text); }

      This cause a recursive call:
      EncrytionManager's encrypt actual calls the encyption.encrypt to do encryption.

      Attachments

        1. GERONIMO-5638.patch
          7 kB
          Lei Wang

        Activity

          People

            rwonly Lei Wang
            rwonly Lei Wang
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: