Clone
 

martyn taylor <mtaylor@redhat.com> in activemq-6

[NO-JIRA] Added Logo Submissions

[NO-JIRA] Updated Logo Submissions

https://issues.apache.org/jira/browse/AMQ-5729 - Do not log passwords on MBean method calls.

Previous to this patch the AnnotatedMBean class would simply dump

any arguments passed in via JMX call to the log (when audit is enabled).

Method parameters can sometimes contain sensitive information such as

the password field on QueueView.sendTextMessage.

This patch adds a @Sensitive annotation to the JMX module allowing

implementations of MBean interfaces to mark method parameters as sensitive

preventing values from being logged.