[jira] [Created] (CXF-9164) Logging Feature - Sensitive attributes (not elements) are not masked

[Mark Diskin (Jira)]

Mark Diskin created CXF-9164:
--------------------------------

             Summary: Logging Feature - Sensitive attributes (not elements) are 
not masked
                 Key: CXF-9164
                 URL: https://issues.apache.org/jira/browse/CXF-9164
             Project: CXF
          Issue Type: Bug
          Components: logging
    Affects Versions: 4.1.3
            Reporter: Mark Diskin


I see that protocol headers and element <a>...</a> are masked but regular 
attributes are not e.g. 
{code:java}
<ns2:entity description="Voluntary Cancellation" entityTypeId="1" id="9" 
sortOrder="9" templateDocId="090027b0801d5969"/>{code}
templateDocId  is not set to XXX.

below is the code I used:
{code:java}
private static LoggingFeature getLoggingFeature() {
    LoggingFeature loggingFeature = new LoggingFeature();
    loggingFeature.addSensitiveProtocolHeaderNames(new 
HashSet<>(List.of("CT-REMOTE-USER")));
    loggingFeature.addSensitiveElementNames(new 
HashSet<>(List.of("username","orgID","templateDocId")));
    loggingFeature.setPrettyLogging(true);
    loggingFeature.setLogBinary(false);
    loggingFeature.setLogMultipart(false);
    return loggingFeature;
} {code}
Hoping this is a correctable oversight or some error I did (I checked for 
addSensitiveAttributeNames method )

Thanks
Mark



--
This message was sent by Atlassian Jira
(v8.20.10#820010)