[jira] [Created] (CXF-7113) Ignore logging certain headers in Request/Response

2016-10-28 Thread Govindaram PS (JIRA)
Govindaram PS created CXF-7113: -- Summary: Ignore logging certain headers in Request/Response Key: CXF-7113 URL: https://issues.apache.org/jira/browse/CXF-7113 Project: CXF Issue Type: Improvemen

[jira] [Updated] (CXF-7113) Ignore logging certain headers in Request/Response

2016-10-28 Thread Govindaram PS (JIRA)
[ https://issues.apache.org/jira/browse/CXF-7113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Govindaram PS updated CXF-7113: --- Description: * In a unsecure logging environment, certain secure headers should not be logged. * Certai

[jira] [Commented] (CXF-6910) don't need setSocketTimeout when create ahc RequestConfig

2016-10-28 Thread Sebastien Petrucci (JIRA)
[ https://issues.apache.org/jira/browse/CXF-6910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15614782#comment-15614782 ] Sebastien Petrucci commented on CXF-6910: - Hello Fang, While trying to understand t

[jira] [Commented] (CXF-6910) don't need setSocketTimeout when create ahc RequestConfig

2016-10-28 Thread Freeman Fang (JIRA)
[ https://issues.apache.org/jira/browse/CXF-6910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15615094#comment-15615094 ] Freeman Fang commented on CXF-6910: --- Hi Sebastien, What I mentioned {code} if there's no

[jira] [Comment Edited] (CXF-6910) don't need setSocketTimeout when create ahc RequestConfig

2016-10-28 Thread Freeman Fang (JIRA)
[ https://issues.apache.org/jira/browse/CXF-6910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15615094#comment-15615094 ] Freeman Fang edited comment on CXF-6910 at 10/28/16 10:59 AM: --

[jira] [Commented] (CXF-6910) don't need setSocketTimeout when create ahc RequestConfig

2016-10-28 Thread Sebastien Petrucci (JIRA)
[ https://issues.apache.org/jira/browse/CXF-6910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15615665#comment-15615665 ] Sebastien Petrucci commented on CXF-6910: - Hey Freeman, Thanks for the update, I se

[jira] [Created] (CXF-7114) Disable HTTP TRACE method on CXF http-jetty transport

2016-10-28 Thread Joe Luo (JIRA)
Joe Luo created CXF-7114: Summary: Disable HTTP TRACE method on CXF http-jetty transport Key: CXF-7114 URL: https://issues.apache.org/jira/browse/CXF-7114 Project: CXF Issue Type: Bug Compo

[jira] [Updated] (CXF-7114) Disable HTTP TRACE method on CXF http-jetty transport

2016-10-28 Thread Joe Luo (JIRA)
[ https://issues.apache.org/jira/browse/CXF-7114?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Joe Luo updated CXF-7114: - Attachment: patch.txt > Disable HTTP TRACE method on CXF http-jetty transport >

[jira] [Updated] (CXF-7114) Disable HTTP TRACE method on CXF http-jetty transport

2016-10-28 Thread Joe Luo (JIRA)
[ https://issues.apache.org/jira/browse/CXF-7114?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Joe Luo updated CXF-7114: - Description: We had a security scan and found that standalone CXF endpoint using http-jetty transport still had HTT

[jira] [Commented] (CXF-6782) Modifications to JAX-WS client request context leak the thread scope

2016-10-28 Thread RANADEEP SHARMA (JIRA)
[ https://issues.apache.org/jira/browse/CXF-6782?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15616679#comment-15616679 ] RANADEEP SHARMA commented on CXF-6782: -- Same issue is reproducible with CXF version 3.1