ecaudit
ecaudit copied to clipboard
Password obfuscation in multi-line statements
Obfuscation of passwords in multi-line statements was improved in #170. However, as reported by @smiklosovic in a comment, the solution was not bullet proof.
For example, you can have a batch statement with multiple statements which are setting passwords. Even such a batch statement > is invalid, what we found is that it will be logged but the second password will not be obfuscated.
Everything is in this ticket https://issues.apache.org/jira/browse/CASSANDRA-16669
Opening this new ticket to follow up on this