diff options
| author |   guangxingwang <gw1218@att.com> | 2018-02-21 09:22:12 -0600 |
|---|---|---|
| committer | guangxingwang <gw1218@att.com> | 2018-02-21 10:18:54 -0600 |
| commit | 4cee34f2eb3a1a57556f818bf1d107723b1ba7b8 (patch) | |
| tree | f2a8490c061dcaacfe259dd2465761e42eecbc5d | |
| parent | 881074dbf97b3a2d52d28fdd404e083b8e974d0d (diff) | |
Fix Fortify Log Forging Issue
Fix Fortify log forging issue by removing properties info from logging.
Issue-ID: POLICY-544
Change-Id: I6e7d39abe18698f864564844963d7bbddedd2e3b
Signed-off-by: guangxingwang <gw1218@att.com>
| -rw-r--r-- | ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java b/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java index 4399f715f..273383ae6 100644 --- a/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java +++ b/ONAP-XACML/src/main/java/org/onap/policy/xacml/std/pap/StdEngine.java @@ -320,7 +320,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE // If it exists already // if (Files.exists(groupPath)) { - logger.warn(addGroup + id + " directory exists" + groupPath.toString()); + logger.warn(addGroup + id + " directory exists"); } else { try { // @@ -338,7 +338,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE Path policyProperties = Paths.get(groupPath.toString(), "xacml.policy.properties"); if (Files.exists(policyProperties)) { - logger.warn(addGroup + id + " file exists: " + policyProperties.toString()); + logger.warn(addGroup + id + " file exists"); } else { Properties props = new Properties(); props.setProperty(XACMLProperties.PROP_REFERENCEDPOLICIES, ""); @@ -359,7 +359,7 @@ public class StdEngine extends StdPDPItemSetChangeNotifier implements PAPPolicyE Path pipProperties = Paths.get(groupPath.toString(), "xacml.pip.properties"); Properties props = new Properties(); if (Files.exists(pipProperties)) { - logger.warn(addGroup + id + " file exists: " + pipProperties.toString()); + logger.warn(addGroup + id + " file exists."); } else { try { props = setPIPProperties(props); |