[hibernate-issues] [JIRA] (HHH-13926) StaleStateException should (optionally) not leak statements in the logs

[Mickaël TRICOT (JIRA)]

Mickaël TRICOT ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A0d3f573f-438e-4be7-b5ec-528c5465e34b ) *created* an issue

Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 ) / Improvement ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 ) HHH-13926 ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 ) StaleStateException should (optionally) not leak statements in the logs ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 )

Issue Type: Improvement Affects Versions: 5.4.13 Assignee: Unassigned Components: hibernate-core Created: 03/Apr/2020 08:24 AM Priority: Minor Reporter: Mickaël TRICOT ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A0d3f573f-438e-4be7-b5ec-528c5465e34b )

When a StaleStateException is raised, the statement is always added to the exception message. As a result, sensible data may leak in the logs, without any option to turn it off (apart from hiding the exceptions, which does not sound like a good option)

My first idea would be to add the statement conditionally (if `show_sql` is true for instance, or any other option).

Also see: HHH-11082 ( https://hibernate.atlassian.net/browse/HHH-11082 ) Closed HHH-12878 ( https://hibernate.atlassian.net/browse/HHH-12878 ) Closed

( https://hibernate.atlassian.net/browse/HHH-13926#add-comment?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-13926#add-comment?atlOrigin=eyJpIjoiMzkzZDVkODMzZGM5NGMxMzkzOTY2YTRmZjk0MzFkYjMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100124- sha1:7217f9f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/hibernate-issues/attachments/20200403/0fa8e1be/attachment-0001.html