Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.x] Exclude sensitive info from the jackson serialization stacktraces #3198

Merged
merged 1 commit into from
Aug 16, 2023

Conversation

opensearch-trigger-bot[bot]
Copy link
Contributor

Backport 0d915e2 from #3195.

)

If Jackson can't parse JSON body it throws `IOException` which contains
the whole request body including hashes, passwords and so on. This
property was added in 2.9 version, so the body will be excluded from
logs. Instead, Jackson adds `UNKNOWN` for the source and provides the
property name it can't parse.

Signed-off-by: Andrey Pleskach <[email protected]>
(cherry picked from commit 0d915e2)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@codecov
Copy link

codecov bot commented Aug 16, 2023

Codecov Report

Merging #3198 (219d138) into 2.x (5fa0032) will increase coverage by 0.01%.
The diff coverage is 100.00%.

@@             Coverage Diff              @@
##                2.x    #3198      +/-   ##
============================================
+ Coverage     62.24%   62.25%   +0.01%     
- Complexity     3314     3315       +1     
============================================
  Files           265      265              
  Lines         19507    19508       +1     
  Branches       3329     3329              
============================================
+ Hits          12142    12145       +3     
+ Misses         5739     5738       -1     
+ Partials       1626     1625       -1     
Files Changed Coverage Δ
...a/org/opensearch/security/DefaultObjectMapper.java 64.55% <100.00%> (+0.45%) ⬆️

... and 1 file with indirect coverage changes

@peternied peternied merged commit 25cf45a into 2.x Aug 16, 2023
@peternied peternied deleted the backport/backport-3195-to-2.x branch August 16, 2023 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants