ecaudit icon indicating copy to clipboard operation
ecaudit copied to clipboard

Password obfuscation in multi-line statements

Open eperott opened this issue 3 years ago • 0 comments

Obfuscation of passwords in multi-line statements was improved in #170. However, as reported by @smiklosovic in a comment, the solution was not bullet proof.

For example, you can have a batch statement with multiple statements which are setting passwords. Even such a batch statement > is invalid, what we found is that it will be logged but the second password will not be obfuscated.

Everything is in this ticket https://issues.apache.org/jira/browse/CASSANDRA-16669

Opening this new ticket to follow up on this

eperott avatar Aug 11 '21 09:08 eperott