Fix Fortify log forging issue by removing properties info from logging.
Issue-ID: POLICY-544
Change-Id: I6e7d39abe18698f864564844963d7bbddedd2e3b
Signed-off-by: guangxingwang <gw1218@att.com>
// If it exists already
//
if (Files.exists(groupPath)) {
// If it exists already
//
if (Files.exists(groupPath)) {
- logger.warn(addGroup + id + " directory exists" + groupPath.toString());
+ logger.warn(addGroup + id + " directory exists");
Path policyProperties = Paths.get(groupPath.toString(), "xacml.policy.properties");
if (Files.exists(policyProperties)) {
Path policyProperties = Paths.get(groupPath.toString(), "xacml.policy.properties");
if (Files.exists(policyProperties)) {
- logger.warn(addGroup + id + " file exists: " + policyProperties.toString());
+ logger.warn(addGroup + id + " file exists");
} else {
Properties props = new Properties();
props.setProperty(XACMLProperties.PROP_REFERENCEDPOLICIES, "");
} else {
Properties props = new Properties();
props.setProperty(XACMLProperties.PROP_REFERENCEDPOLICIES, "");
Path pipProperties = Paths.get(groupPath.toString(), "xacml.pip.properties");
Properties props = new Properties();
if (Files.exists(pipProperties)) {
Path pipProperties = Paths.get(groupPath.toString(), "xacml.pip.properties");
Properties props = new Properties();
if (Files.exists(pipProperties)) {
- logger.warn(addGroup + id + " file exists: " + pipProperties.toString());
+ logger.warn(addGroup + id + " file exists.");
} else {
try {
props = setPIPProperties(props);
} else {
try {
props = setPIPProperties(props);