[
http://www.stripesframework.org/jira/browse/STS-59?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ben Gunter closed STS-59.
-------------------------
> Output of http parameters may be security hole
> ----------------------------------------------
>
> Key: STS-59
> URL: http://www.stripesframework.org/jira/browse/STS-59
> Project: Stripes
> Issue Type: Bug
> Reporter: Greg Hinkle
> Assignee: Tim Fennell
> Fix For: Release 1.0
>
>
> I noticed the log now outputs the values of a field during validation. Its
> nice for debugging, but some may consider it a security risk. Mostly because
> its easy to accidentally change log levels without considering the security
> implications. On this one, I'd tell people to learn to use a debugger if then
> need to see the values somewhere. Too many people just throw log all at debug
> log4j configurations into their applications and never turn it off.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
