From bef12b22edd08df30a8baa531421b35a9c6c0c95 Mon Sep 17 00:00:00 2001 From: rene-ye Date: Fri, 5 Jan 2018 13:19:51 -0800 Subject: [PATCH] logger security fix don't print keystoresecrets --- src/main/java/com/microsoft/sqlserver/jdbc/Util.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/com/microsoft/sqlserver/jdbc/Util.java b/src/main/java/com/microsoft/sqlserver/jdbc/Util.java index c1d6d81dc..348d418ba 100644 --- a/src/main/java/com/microsoft/sqlserver/jdbc/Util.java +++ b/src/main/java/com/microsoft/sqlserver/jdbc/Util.java @@ -391,7 +391,8 @@ else if (ch == ':') if (null != name) { if (logger.isLoggable(Level.FINE)) { if (false == name.equals(SQLServerDriverStringProperty.USER.toString())) { - if (!name.toLowerCase(Locale.ENGLISH).contains("password")) { + if (!name.toLowerCase(Locale.ENGLISH).contains("password") && + !name.toLowerCase(Locale.ENGLISH).contains("keystoresecret")) { logger.fine("Property:" + name + " Value:" + value); } else {