Re: [disscuss][java-chassis] is there any existing sensitive word filter component?

2019-04-16 Thread Willem Jiang
Hi, You can take this log implementation[1][2] as an example. If you just want to mask the password property, you can use String replace method to remove it. [1]https://konstantinpavlov.net/blog/2015/07/26/secure-java-logging-with-logback/ [2]https://github.com/javabeanz/owasp-security-logging

[disscuss][java-chassis] is there any existing sensitive word filter component?

2019-04-14 Thread wjm wjm
https://github.com/apache/servicecomb-java-chassis/pull/1180 inspector of configuration need to change some value to "**", eg: password