Hi Ruwan;

I guess a synapse committer needs to correct this an commit....

Thanks & regards,
-Prabath

On Fri, Oct 29, 2010 at 4:37 PM, Ruwan Linton <[email protected]> wrote:
> +1, I guess logging these info is totally wrong, may be we have added those
> for debugging purposes.
>
> Ruwan
>
> On 10/29/10 2:09 PM, Prabath Siriwardana wrote:
>>
>> On Fri, Oct 29, 2010 at 2:01 PM, Anjana Fernando<[email protected]>  wrote:
>>>
>>> Hi,
>>>
>>> When going through "SecretResolver" class's source code [1]. I noticed in
>>> the method "public String resolve(String encryptedPassword, String
>>> prompt)",
>>> at the end, it is logging both the encrypted and the final unencrypted
>>> clear
>>> text value as a log.info(). I guess we should not be logging this kind of
>>> information, or is this intended behaviour ? ..
>>
>> +1 - we need to remove those logs...
>>
>> Thanks&  regards,
>> -Prabath
>>
>>
>>> [1]
>>>
>>> https://svn.wso2.org/repos/wso2/branches/carbon/3.1.0/dependencies/synapse/modules/securevault/src/main/java/org/apache/synapse/securevault/SecretResolver.java
>>>
>>> Cheers,
>>> Anjana.
>>>
>>> --
>>> Anjana Fernando
>>> Software Engineer
>>> WSO2, Inc.; http://wso2.com
>>> lean.enterprise.middleware
>>>
>>>
>>> _______________________________________________
>>> Carbon-dev mailing list
>>> [email protected]
>>> https://wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>>
>>>
>>
>>
>
>
> --
> Ruwan Linton
> Software Architect&  Product Manager, WSO2 ESB; http://wso2.org/esb
> WSO2 Inc.; http://wso2.com
>
> Lean . Enterprise . Middleware
>
> phone: +1 408 754 7388 ext 51789
> email: [email protected]; cell: +94 77 341 3097
> blog: http://blog.ruwan.org
> linkedin: http://www.linkedin.com/in/ruwanlinton
> tweet: http://twitter.com/ruwanlinton
>
>



-- 
Thanks & Regards,
Prabath Siriwardena

http://blog.facilelogin.com
http://RampartFAQ.com

_______________________________________________
Carbon-dev mailing list
[email protected]
https://wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to