[jboss-jira] [JBoss JIRA] Created: (JBCLUSTER-245) Session id masking logic using incorrect variable

Brian Stansberry (JIRA) jira-events at lists.jboss.org
Thu Dec 10 09:27:30 EST 2009


Session id masking logic using incorrect variable
-------------------------------------------------

                 Key: JBCLUSTER-245
                 URL: https://jira.jboss.org/jira/browse/JBCLUSTER-245
             Project: JBoss Clustering
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: HA-Server-Cache-JBC
    Affects Versions: HA-Server-Cache-JBC 2.1.0.GA 
            Reporter: Brian Stansberry
            Assignee: Brian Stansberry
             Fix For: HA-Server-Cache-JBC 2.1.1.GA


Util.maskId() has this:

         StringBuilder sb = new StringBuilder(realId.substring(0, 2));
         sb.append("****");
         sb.append(sb.substring(length - 6, length));
         return sb.toString();

Should be:

         sb.append(realId.substring(length - 6, length));

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list