ffang opened a new pull request, #3594: URL: https://github.com/apache/cxf/pull/3594
HTTPConduit was logging the full cached request body at FINE level during redirect and retransmit handling, exposing sensitive form parameters (e.g. client_secret) in debug logs. The standard LoggingFeature cannot filter this since it bypasses the interceptor chain. For form-urlencoded content, redact parameter values while preserving keys (e.g. "client_secret=***"). For other content types, log only the message size. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
