summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorguangxingwang <gw1218@att.com>2018-02-21 09:22:12 -0600
committerguangxingwang <gw1218@att.com>2018-02-21 10:18:54 -0600
commit4cee34f2eb3a1a57556f818bf1d107723b1ba7b8 (patch)
treef2a8490c061dcaacfe259dd2465761e42eecbc5d
parent881074dbf97b3a2d52d28fdd404e083b8e974d0d (diff)
Fix Fortify Log Forging Issue
Fix Fortify log forging issue by removing properties info from logging. Issue-ID: POLICY-544 Change-Id: I6e7d39abe18698f864564844963d7bbddedd2e3b Signed-off-by: guangxingwang <gw1218@att.com>
-rw-r--r--ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java6
1 files changed, 3 insertions, 3 deletions
diff --git a/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java b/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java
index 4399f715f..273383ae6 100644
--- a/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java
+++ b/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java
@@ -320,7 +320,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE
// If it exists already
//
if (Files.exists(groupPath)) {
- logger.warn(addGroup + id + " directory exists" + groupPath.toString());
+ logger.warn(addGroup + id + " directory exists");
} else {
try {
//
@@ -338,7 +338,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE
Path policyProperties = Paths.get(groupPath.toString(), "xacml.policy.properties");
if (Files.exists(policyProperties)) {
- logger.warn(addGroup + id + " file exists: " + policyProperties.toString());
+ logger.warn(addGroup + id + " file exists");
} else {
Properties props = new Properties();
props.setProperty(XACMLProperties.PROP_REFERENCEDPOLICIES, "");
@@ -359,7 +359,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE
Path pipProperties = Paths.get(groupPath.toString(), "xacml.pip.properties");
Properties props = new Properties();
if (Files.exists(pipProperties)) {
- logger.warn(addGroup + id + " file exists: " + pipProperties.toString());
+ logger.warn(addGroup + id + " file exists.");
} else {
try {
props = setPIPProperties(props);