Session id masking logic using incorrect variable ------------------------------------------------- Key: JBCLUSTER-245 URL: https://jira.jboss.org/jira/browse/JBCLUSTER-245 Project: JBoss Clustering Issue Type: Bug Security Level: Public (Everyone can see) Components: HA-Server-Cache-JBC Affects Versions: HA-Server-Cache-JBC 2.1.0.GA Reporter: Brian Stansberry Assignee: Brian Stansberry Fix For: HA-Server-Cache-JBC 2.1.1.GA Util.maskId() has this: StringBuilder sb = new StringBuilder(realId.substring(0, 2)); sb.append("****"); sb.append(sb.substring(length - 6, length)); return sb.toString(); Should be: sb.append(realId.substring(length - 6, length)); -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira