spring-boot

Spring Boot

Tree: 195def0ec3

David Good 775f0fa861 Improve sanitization for list of URI types Prior to this commit, Actuator would sanitize properties values when serializing them on the dedicated endpoint. Keys like "password" or "secret" are entirely sanitized, but other keys like "uri" or "address" are considered as URI types and only the password part of the user info is sanitized. This commit fixes the sanitization process where lists of such URI types would not match the first entries of the list since they're starting with `'['`. This commit improves the regexp matching process to sanitize all URIs within a collection. The documentation is also updated to better underline the processing difference between complete sanitization and selective sanitization for URIs. Fixes gh-23037	5 years ago
..
src	Improve sanitization for list of URI types	5 years ago
pom.xml	Upgrade to Liquibase 3.8.5	6 years ago

David Good 775f0fa861 Improve sanitization for list of URI types

Prior to this commit, Actuator would sanitize properties values when
serializing them on the dedicated endpoint. Keys like "password" or
"secret" are entirely sanitized, but other keys like "uri" or "address"
are considered as URI types and only the password part of the user info
is sanitized.

This commit fixes the sanitization process where lists of such URI types
would not match the first entries of the list since they're starting
with `'['`. This commit improves the regexp matching process to sanitize
all URIs within a collection.

The documentation is also updated to better underline the processing
difference between complete sanitization and selective sanitization for
URIs.

Fixes gh-23037

5 years ago

src

Improve sanitization for list of URI types

5 years ago

pom.xml

Upgrade to Liquibase 3.8.5

6 years ago