> Hi, > > Enhanced exception messages are designed to hide sensitive information such > as hostnames, IP > addresses from exception message strings, unless the enhanced mode for the > specific category > has been explicitly enabled. Enhanced exceptions were first introduced in > 8204233 in JDK 11 and > updated in 8207846. > > This PR aims to increase the coverage of enhanced exception messages in the > networking code. > A limited number of exceptions are already hidden (restricted) by default. > The new categories and > exceptions in this PR will be restricted on an opt-in basis, ie. the default > mode will be enhanced > (while preserving the existing behavior). > > The mechanism is controlled by the security/system property > "jdk.includeInExceptions" which takes as value > a comma separated list of category names, which identify groups of exceptions > where the exception > message may be enhanced. Any category not listed is "restricted" which means > that potentially > sensitive information (such as hostnames, IP addresses, user identities) are > excluded from the message text. > > The changes to the java.security conf file describe the exact changes in > terms of the categories now > supported and any changes in behavior. > > Thanks, > Michael
Michael McMahon has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 20 commits: - review update - Merge branch 'master' into 8348986-exceptions - update to minimise code changes - Merge branch 'master' into 8348986-exceptions - Merge branch 'master' into 8348986-exceptions - Apply suggestions from code review from turbanoff review Co-authored-by: Andrey Turbanov <turban...@gmail.com> - doc + copyright update - remove file added by mistake - whitespace - moved test - ... and 10 more: https://git.openjdk.org/jdk/compare/b7837843...da33863c ------------- Changes: https://git.openjdk.org/jdk/pull/23929/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=23929&range=05 Stats: 948 lines in 42 files changed: 715 ins; 101 del; 132 mod Patch: https://git.openjdk.org/jdk/pull/23929.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/23929/head:pull/23929 PR: https://git.openjdk.org/jdk/pull/23929
